trend micro officescan

Name: trend micro officescan
Brand: trend micro

productUS

cpe:2.3:a:trend_micro:officescan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical15high14medium0low

updated 2026-10-29

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-3364US	high9.3	32.8% (98th)	Exploit	no fix	2008-07-30	= 7.3
CVE-2008-2439US	medium5.0	20.1% (97th)	Exploit	no fix	2008-10-03	2 versions
CVE-2003-1341US	high7.5	7.66% (95th)	Exploit	no fix	2003-12-31	6 versions
CVE-2000-0204US	medium5.0	7.36% (94th)	Exploit	no fix	2000-02-28	= 3.5
CVE-2002-1349US	medium4.6	1.20% (68th)	Exploit	no fix	2002-12-18	= corporate_5.02
CVE-2008-3862US	high10.0	18.4% (97th)	—	no fix	2008-10-23	2 versions
CVE-2007-0851US	high9.3	8.36% (95th)	—	no fix	2007-02-08	15 versions
CVE-2008-2437US	high10.0	6.67% (94th)	—	no fix	2008-09-16	3 versions
CVE-2006-5157US	medium5.1	6.60% (94th)	—	no fix	2006-10-05	= corporate_7.3
CVE-2008-3865US	high10.0	6.43% (94th)	—	no fix	2009-01-21	= 8.0
CVE-2008-4402US	high10.0	5.53% (93rd)	—	no fix	2008-10-03	= 8.0
CVE-2007-3454US	high10.0	5.53% (93rd)	—	no fix	2007-06-27	2 versions
CVE-2005-0533US	high7.5	4.41% (91st)	—	no fix	2005-05-02	11 versions
CVE-2008-4403US	medium5.0	3.17% (88th)	—	no fix	2008-10-03	= 8.0
CVE-2006-6178US	high7.5	3.12% (88th)	—	no fix	2006-11-30	= 7.3
CVE-2006-6179US	high7.5	3.12% (88th)	—	no fix	2006-11-30	= 7.3
CVE-2007-3455US	high10.0	3.00% (87th)	—	no fix	2007-06-27	= 8.0
CVE-2006-6458US	high7.8	2.67% (86th)	—	no fix	2006-12-11	= 7.3
CVE-2001-1150US	medium5.0	2.45% (84th)	—	no fix	2001-08-22	2 versions
CVE-2001-1151US	medium5.0OT elevated	2.41% (84th)	—	no fix	2001-10-15	= corporate_3.53
CVE-2008-3864US	medium5.0	2.08% (81st)	—	no fix	2009-01-21	= 8.0
CVE-2000-0203US	medium5.0	1.81% (79th)	—	no fix	2000-02-28	= 3.5
CVE-2000-0205US	medium6.4	1.71% (77th)	—	no fix	2000-03-03	= 3.5
CVE-2006-1381US	high10.0	1.62% (76th)	—	no fix	2006-03-24	= 5.5
CVE-2006-5212US	medium5.0	1.55% (75th)	—	no fix	2006-10-10	4 versions
CVE-2005-3379US	medium5.1	1.45% (73rd)	—	no fix	2005-10-30	= 7.0_engine_7.510.1002
CVE-2004-2006US	medium4.6	0.50% (43rd)	—	no fix	2004-05-07	7 versions
CVE-2008-3866US	medium4.6	0.40% (34th)	—	no fix	2009-01-21	= 8.0
CVE-2004-2430US	high7.2	0.40% (34th)	—	no fix	2004-12-31	8 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer9 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-264CWE-2642 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-399CWE-3992 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan