Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-1223: Trend Micro Office Scan and Worry-Free Business Security allow unauthorized file access

CVE-2016-1223 · published 10 years ago

Summary

Certain versions of Trend Micro Office Scan and Worry-Free Business Security have a security flaw that allows an attacker to read sensitive files from a computer remotely. This could potentially expose confidential information. Update your software to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
trendmicro	officescan	11.0 `cpe:2.3:a:trendmicro:officescan:11.0:::::::*`
trendmicro	worry-free_business_security	9.0 `cpe:2.3:a:trendmicro:worry-free_business_security:9.0:::::::*`
trendmicro	worry-free_business_security_services	5.0 `cpe:2.3:a:trendmicro:worry-free_business_security_services:5.0:::::::*`

Original advisory text

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via...

References

http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx Vendor Advisory
http://jvn.jp/en/jp/JVN48847535/index.html Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074 Third Party Advisory VDB Entry Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.3 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published19 Jun 2016

Updated24 Oct 2026

First seen13 Mar 2026

Sources

CVE-2016-1223 · OSV

CVE-2016-1223 · NVD

Track software like this

Free during beta