CVE-2019-19691: Trend Micro Apex One

Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days.

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only

Published 2019-12-20. Last modified 2026-06-17.