CVE-2021-25236

🗓️ 04 Feb 2021 19:36:43Reported by trendmicroType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 61 Views

A server-side request forgery (SSRF) vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-25236	4 Feb 202122:34	–	circl
CNNVD	Trend Micro OfficeScan XG 和 Trend Micro Worry-Free Business Security 代码问题漏洞	4 Feb 202100:00	–	cnnvd
CNVD	Trend Micro OfficeScan XG and Trend Micro Worry-Free Business Security Server-Side Request Forgery Vulnerabilities	5 Feb 202100:00	–	cnvd
Cvelist	CVE-2021-25236	4 Feb 202119:36	–	cvelist
EUVD	EUVD-2021-12147	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25236	4 Feb 202120:15	–	nvd
OSV	CVE-2021-25236	4 Feb 202120:15	–	osv
Prion	Information disclosure	4 Feb 202120:15	–	prion
RedhatCVE	CVE-2021-25236	22 May 202521:38	–	redhatcve
Zero Day Initiative	Trend Micro OfficeScan Server-Side Request Forgery Information Disclosure Vulnerability	29 Jan 202100:00	–	zdi

NVD

Node

trendmicro officescanMatchxgsp1

trendmicro worry-free_business_securityMatch10.0sp1

AND

microsoft windowsMatch-

[
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  },
  {
    "product": "Trend Micro Worry-Free Business Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "10.0 SP1"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000284206
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-120/
success	www.success.trendmicro.com/solution/000284205

17 Jun 2026 03:41Current

5.1Medium risk

Vulners AI Score5.1

CVSS 25

CVSS 3.15.3

EPSS0.01898

CWE-918