Deep Security Agent

Vendor:

First CVE: Jan 20, 2022 · Active for 4 years

15
Total CVEs
More Total CVEs than 92% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Deep Security Agent over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 20, 2022
4 years ago
Most Recent CVE
Jun 17, 2025
402 days ago

CVE Severity & Scoring

Deep Security Agent15 CVEs
All CVEs352,231 CVEs
LowMediumHigh
Attack Vector
Local13 (86.7%)
Network2 (13.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None14 (93.3%)
Unknown0 (0.0%)
Required1 (6.7%)
Privileges Required
Low14 (93.3%)
High0 (0.0%)
None1 (6.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (15 CVEs).

15 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary fi
Jan 20, 20227.535NONO
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on
Nov 19, 20248.829NONO
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges an
Jan 20, 20227.828NONO
A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected i
Sep 28, 20227.825NONO
A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privi
Jan 23, 20247.823NONO
An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate pr
Dec 31, 20247.322NONO
An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an att
Oct 22, 20247.822NONO
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Pl
Jun 10, 20247.822NONO
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected install
Jun 17, 20257.821NONO
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker m
Jun 17, 20257.821NONO

Exploit Exposure

Signals from CVEs in this product scope (15 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (15 CVEs).

Media Mentions

Signals from CVEs in this product scope (15 CVEs).

Top CNAs Publishing CVEs For Deep Security Agent

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
20.0.167.40.9%00
20.086.80.8%00
12.027.714.3%00
11.027.714.3%00
10.027.714.3%00