CVE-2019-9489

HIGH EXPLOITED

Trend Micro Apex One, OfficeScan & Worry-Free - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2019-9489 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product's management console.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://success.trendmicro.com/solution/1122250
Patch, Vendor Advisory x_refsource_confirm
https://success.trendmicro.com/jp/solution/1122253

Scores

CVSS v3 7.5
EPSS 0.0057
EPSS Percentile 68.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

VulnCheck KEV 2020-01-17
CWE
CWE-22
Status published
Products (7)
trendmicro/apex_one < b1066
trendmicro/apex_one_as_a_service < 2019-03-27
trendmicro/business_security 9.0 sp3
trendmicro/officescan 11.0 sp1
trendmicro/officescan xg (2 CPE variants)
trendmicro/worry-free_business_security 9.5
trendmicro/worry-free_business_security 10.0
Published Apr 05, 2019
Tracked Since Feb 18, 2026