CyberSec.Space Logo
Back to CVE Browser

CVE-2020-8467

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score75.5430%
EPSS Percentile98.80th
PublishedMar 18, 2020
Last ModifiedOct 31, 2025

Vulnerability Description

A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

Affected Platforms (CPE)

📦
Trendmicro

Apex One

= 2019
📦
Trendmicro

Officescan

= xg
📦
Trendmicro

Officescan

= xg

References & Advisories

🔗 https://success.trendmicro.com/jp/solution/000244253
🔗 https://success.trendmicro.com/solution/000245571
🔗 https://success.trendmicro.com/jp/solution/000244253
🔗 https://success.trendmicro.com/solution/000245571
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8467

Related Vulnerabilities

CVE-2020-85999.8

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arb...

CVE-2019-181899.8

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) ma...

CVE-2020-85989.8

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service ...

CVE-2026-349269.2

Trend Micro Apex One is vulnerable to Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability. Apply mitigations per v...