CVE-2020-8467: Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 10.9% chance of exploitation in the next 30 days.

A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only

Published 2020-03-18. Last modified 2026-06-17.