CVE-2020-8599
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
11.9%
Published
Mar 18, 2020
CISA due date
May 3, 2022
The record
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|