CVE-2016-1223: Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x...

Security readout for executives and security teams

This vulnerability lets a remote attacker read arbitrary files from systems running specific Trend Micro business security products. The sources do not provide CVSS scoring, authentication requirements, or the exact vulnerable component, so urgency depends on whether affected legacy products remain deployed and reachable. Exposure is most likely where the named Trend Micro versions are still installed, especially if related services are reachable by untrusted networks. The provided sources do not identify specific ports, URLs, platforms, or authentication conditions. Treat as a priority legacy-product exposure check. The absence of CVSS and exploit evidence reduces certainty, but remote arbitrary file read in security software can create meaningful confidentiality risk. Mitigation focus: Confirm whether any named Trend Micro versions remain deployed.; Check Trend Micro advisory 1114102 and JVN guidance for vendor-approved updates or mitigations.; Restrict access to affected management or service interfaces to trusted networks..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.