VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 28, 2019· Updated Jun 17, 2026

CVE-2019-18189

CVE-2019-18189

Description

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Trend Micro/Apex One2 versions
    cpe:2.3:a:trendmicro:apex_one:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:apex_one:*:*:*:*:*:*:*:*
    • (no CPE)
  • Trend Micro/Officescan4 versions
    cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:officescan:xg:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
    • (no CPE)range: 11.0, XG
  • Trend Micro/Worry Free Business Security4 versions
    cpe:2.3:a:trendmicro:worry-free_business_security:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:trendmicro:worry-free_business_security:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:worry-free_business_security:9.5:*:*:*:*:*:*:*
    • (no CPE)range: 9.5, 10.0
  • Trend Micro/Trend Micro Apex One, Trend Micro OfficeScan (OSCE), Trend Micro Worry-Free Business Security (WFBS)v5
    Range: Apex One (All), OSCE (11.0, XG), WFBS (9.5, 10.0)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.