CVE-2019-9489
High
Description
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product's management console.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTrendmicro Apex One
PublishedApr 5, 2019
First seenApr 5, 2019
How to fix
Update
- trendmicro apex_one_as_a_service2019-03-27 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro apex_one | v ≤ b1066 | — |
| trendmicro apex_one_as_a_service | v < 2019-03-27 | 2019-03-27 |
| trendmicro business_security | 9.0 | — |
| trendmicro officescan | 11.0, xg | — |
| trendmicro worry-free_business_security | 9.5, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.