Trend Micro Multiple Products Content Validation Escape Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| apex one | = 2019 | |
| officescan | = xg | |
| worry-free business security | = 10.0= 9.0= 9.5 |
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free