Apex One and Apex Central
CVE-2020-8599: Apex One and OfficeScan Authentication Bypass
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro OfficeScan, Trend Micro Apex One OfficeScan XG (12.0), Apex One 2019 (14 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
Exploitation
CISA lists this CVE as exploited in the wild since 3 Nov 2021.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.