CVE-2021-32465

🗓️ 04 Aug 2021 18:29:37Reported by trendmicroType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 73 Views

Incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the Apex One and OfficeScan antivirus software lies in errors during the saving of permissions, allowing a hacker to bypass the security measures.	25 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-32465	4 Aug 202123:23	–	circl
CNNVD	Trend Micro Apex One 安全漏洞	28 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-32465	4 Aug 202118:29	–	cvelist
EUVD	EUVD-2021-19319	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises	4 Aug 202102:15	–	jvn
NCSC	Vulnerabilities fixed in Trend Micro Apex One	13 Aug 202100:00	–	ncsc
NVD	CVE-2021-32465	4 Aug 202119:15	–	nvd
OSV	CVE-2021-32465	4 Aug 202119:15	–	osv
Prion	Authentication flaw	4 Aug 202119:15	–	prion

NVD

Node

trendmicro apex_oneMatch2019

trendmicro officescanMatchxgsp1

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019, SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000287819
success	www.success.trendmicro.com/jp/solution/000287796
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-911/

17 Jun 2026 03:53Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 3.18.8

EPSS0.04341

CWE-281

trend micro apex one apex one as a service officescan xg sp1 vulnerability authentication bypass remote attack cve-2021-32465 nvd