CVE-2019-18187
Trend Micro OfficeScan
Trend Micro OfficeScan Directory Traversal Vulnerability
What it is
Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CVE-2026-34926 · May 21, 2026
- Apex One Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 · Aug 18, 2025
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 · Sep 15, 2022
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021