Skip to content
COOEY

FAIL › dossier

Apex One, Apex One as a Service, and Worry-Free Business Security

PRODUCT

· dossier confidence 40%

Trend Micro Apex One and Worry-Free Business Security are endpoint and network security solutions that suffered high-severity improper input validation flaws in 2021, allowing remote file uploads and privilege escalation. The vendor's security posture is mixed, with a track record of critical vulnerabilities in its core products that require ongoing vigilance from compliance officers.

Failure events
2
Zero-days
0
RCEs
0
On KEV
2
Critical
0
Worst shame
78
PROFILE
CategorycybersecurityWhat they doTrend Micro Apex One and Worry-Free Business Security are endpoint and network security solutions that provide threat protection, data loss prevention, and device management for commercial and government sectors.Founded1998 Websitehttps://www.trendmicro.com ↗
SECURITY POSTURE

The vendor has a mixed security posture, evidenced by high-severity improper input validation flaws in 2021 that allowed remote file uploads and privilege escalation across its Apex One and Worry-Free Business Security products.

Notable failures
  • CVE-2021-36741: improper input validation allowing remote file upload
  • CVE-2021-36742: improper input validation enabling privilege escalation
Patterns: repeated improper input validation flaws in core security products
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2021-11-03 CVE-2021-36741 high Trend Micro Apex One and Worry-Free Business Security suffered an improper input validation flaw allowing remote attackers to upload arbitrary files.
2021-11-03 CVE-2021-36742 high Trend Micro Apex One and Worry-Free Business Security suffered an improper input validation flaw enabling privilege escalation.
DOSSIER SOURCES
Open questions: founded year · headquarters location · company size · ownership structure · website URL
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-15 04:34:43.913171+00:00