Back to CVE Browser

CVE-2020-8599

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score39.7300%

EPSS Percentile97.43th

PublishedMar 18, 2020

Last ModifiedOct 31, 2025

Vulnerability Description

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

Affected Platforms (CPE)

📦

Trendmicro

Apex One

= 2019

📦

Trendmicro

Officescan

= xg

📦

Trendmicro

Officescan

= xg

References & Advisories

🔗 https://success.trendmicro.com/jp/solution/000244253

🔗 https://success.trendmicro.com/solution/000245571

🔗 https://success.trendmicro.com/jp/solution/000244253

🔗 https://success.trendmicro.com/solution/000245571

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8599

Related Vulnerabilities

CVE-2020-85989.8

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service ...

CVE-2019-181899.8

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) ma...

CVE-2026-349269.2

Trend Micro Apex One is vulnerable to Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability. Apply mitigations per v...

CVE-2020-84678.8

A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote atta...