Trend Micro Trend Micro Apex One

Name: Trend Micro Trend Micro Apex One
Brand: Trend Micro

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

2critical46high33medium0low

updated 2026-10-28

vulnerabilities (81)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-36741US	high8.8OT critical	4.95% (92nd)	KEV	no fix	2021-07-29	≤ 2019, SaaS
CVE-2022-40139US	high7.2OT critical	3.44% (89th)	KEV	no fix	2022-09-19	≤ 2019 (on-prem) and SaaS
CVE-2020-24557US	high7.8OT critical	2.67% (86th)	KEV	no fix	2020-09-01	≤ 2009 (on premise), SaaS
CVE-2021-36742US	high7.8OT critical	1.48% (74th)	KEV	no fix	2021-07-29	≤ 2019, SaaS
CVE-2021-25253US	high7.8	1.91% (80th)	Exploit	no fix	2021-04-13	≤ 2019, SaaS
CVE-2022-40140US	medium5.5	0.33% (26th)	Exploit	no fix	2022-09-19	≤ 2019 (on-prem) and SaaS
CVE-2019-18188US	high7.5	4.66% (92nd)	—	no fix	2019-10-28	≤ All
CVE-2021-32465US	high8.8	4.34% (91st)	—	no fix	2021-08-04	≤ 2019, SaaS
CVE-2020-28583US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28582US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28577US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28576US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28573US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2022-24678US	high7.5	2.33% (84th)	—	no fix	2022-02-24	≤ 2019, SaaS
CVE-2020-25773US	high7.8	2.26% (83rd)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2021-25243US	medium5.3	2.15% (82nd)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25242US	medium5.3	2.15% (82nd)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25231US	medium5.3	2.15% (82nd)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25228US	medium5.3	2.12% (82nd)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25240US	medium5.3	2.09% (82nd)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25239US	medium5.3	2.09% (82nd)	—	no fix	2021-02-04	≤ 2019
CVE-2021-25235US	medium5.3	2.08% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25230US	medium5.3	2.08% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25229US	medium5.3	2.08% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25234US	medium5.3	2.07% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25233US	medium5.3	2.07% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25232US	medium5.3	2.03% (81st)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2022-40144US	critical9.8	1.93% (80th)	—	no fix	2022-09-19	≤ 2019 (on-prem) and SaaS
CVE-2021-25241US	medium5.3	1.87% (79th)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25246US	medium6.5	1.74% (78th)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2021-25237US	medium5.3	1.57% (75th)	—	no fix	2021-02-04	≤ 2019
CVE-2020-25774US	medium4.3	1.34% (71st)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2022-41746US	critical9.1	1.20% (68th)	—	no fix	2022-10-10	≤ 2019 (on-prem) and SaaS
CVE-2021-23139US	high7.5	1.11% (66th)	—	no fix	2021-10-21	≤ 2019
CVE-2022-40141US	high7.5OT elevated	0.97% (62nd)	—	no fix	2022-09-19	≤ 2019 (on-prem) and SaaS
CVE-2021-25248US	medium5.5	0.89% (59th)	—	no fix	2021-02-04	≤ 2019, SaaS
CVE-2020-25772US	medium5.5	0.88% (59th)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2020-25771US	medium5.5	0.88% (59th)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2020-25770US	medium5.5	0.88% (59th)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2020-24565US	medium5.5	0.88% (59th)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2020-24564US	medium5.5	0.88% (59th)	—	no fix	2020-09-29	≤ 2009, SaaS
CVE-2020-24559US	high7.8	0.80% (56th)	—	no fix	2020-09-01	≤ 2009 (on premise), SaaS
CVE-2020-24556US	high7.8	0.78% (56th)	—	no fix	2020-09-01	≤ 2009 (on premise), SaaS
CVE-2022-41745US	high7.0	0.69% (53rd)	—	no fix	2022-10-10	≤ 2019 (on-prem) and SaaS
CVE-2021-45231US	high7.8	0.64% (51st)	—	no fix	2022-01-10	≤ 2019, SaaS
CVE-2020-24558US	high7.1	0.63% (50th)	—	no fix	2020-09-01	≤ 2009 (on premise), SaaS
CVE-2021-32464US	high7.8OT elevated	0.59% (48th)	—	no fix	2021-08-04	≤ 2019, SaaS
CVE-2021-42012US	high7.8	0.58% (47th)	—	no fix	2021-10-21	≤ 2019, SaaS
CVE-2022-36336US	high7.8	0.57% (47th)	—	no fix	2022-07-30	≤ 2019 and SaaS
CVE-2020-8607US	medium6.7	0.55% (46th)	—	no fix	2020-08-05	≤ 2019 (On premise), SaaS

showing 50 of 81

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management13 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource6 CVEs
CWE-427Uncontrolled Search Path Element4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-276Incorrect Default Permissions3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)81 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan