CVE-2020-28574

7.5 highEPSS 2.8%

High (7.5) in trendmicro worry-free business security. EPSS 2.8% chance of exploitation in the next 30 days.

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2020-11-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:worry-free_business_security

References

https://success.trendmicro.com/solution/000281948
https://www.tenable.com/security/research/tra-2020-62
https://success.trendmicro.com/solution/000281948
https://www.tenable.com/security/research/tra-2020-62

Check your stack JSON