CVE-2020-8599: Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 11.9% chance of exploitation in the next 30 days.

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only

Published 2020-03-18. Last modified 2026-06-17.