PT-2021-3841

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 10.0 SP1 Trend Micro OfficeScan XG version 10.0 SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description The issue is related to improper input validation, which can allow a local attacker to...

PT-2021-3842

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions prior to the fixed version Trend Micro Apex One as a Service versions prior to the fixed version Trend Micro OfficeScan XG versions prior to the fixed version Trend Micro Worry-Free Business Security 10.0 SP1 and...

PT-2021-3859

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description An incorrect permission preservation issue could...

PT-2021-3229

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to insecure file permissions,...

PT-2021-3228

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Apex One as a Service versions affected versions not specified Trend Micro OfficeScan XG SP1 versions affected versions not specified Description The issue is related to...

Information disclosure

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep...

多款 Trend Micro 信息泄露漏洞

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

CVE-2021-25238: Undefined Security Weakness

An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port...

CVE-2021-25236: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep...

PT-2021-16473

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified Trend Micro OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about a content inspectio...

PT-2021-16484

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security affected versions no...

PT-2021-16474

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a...

PT-2021-16476

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: An improper access control information disclosure issue could allow an unauthenticated user to obtain information about an agent's...

PT-2021-16466

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated...

PT-2021-16478

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain x64 agen...

PT-2020-6078

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure, which could allow an unauthenticated user...

PT-2020-6077

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 Description The issue is related to an improper access control information disclosure. It may allow a remote attacker to gain unauthorized access to protected...

PT-2020-6079

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure. It could allow an unauthenticated user to...

PT-2020-6074

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to an improper access control information disclosure, which could allow an unauthenticated user...

CVE-2020-24562: Improper Link Resolution Before File Access

A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code ...