Trend Micro OfficeScan XG 和 Trend Micro Worry-Free Business Security 代码问题漏洞

Trend Micro OfficeScan XG and Trend Micro Worry-Free Business Security are both products of Trend Micro, Inc.Trend Micro OfficeScan XG is a distributed anti-virus software.Trend Micro Worry-Free Business Security is an enterprise-class information security solution. Worry-Free Business Security i...

CVE-2021-25243: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information...

CVE-2021-25239: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes...

CVE-2021-25228: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history...

多款 Trend Micro 信息泄露漏洞

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

CVE-2021-25249: Out-of-bounds Write

An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain...

CVE-2021-25241: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a sweep...

CVE-2021-25242: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...

PT-2021-16478

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain x64 agen...

PT-2021-16469

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific hotfix history file...

Trend Micro Worry-Free Business Security Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Worry-Free Business Security. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by...

PT-2021-16480

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated user to obtain version and build...

PT-2021-16474

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a...

PT-2021-16487

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions not specified OfficeScan XG SP1 version not specified Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds write information disclosure issue could allow a local attacker to...

PT-2021-16466

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated...

Trend Micro Worry-Free Business Security Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Worry-Free Business Security. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by...

PT-2021-16486

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds read information disclosure issue could allow an attacker to disclose sensitive information abou...

PT-2021-16472

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated user to obtain information about a specific...

PT-2021-16482

Name of the Vulnerable Software and Affected Versions: Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain various pieces of configuration information. Recommendations: For Worry-Free Business Security version...

PT-2021-16477

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem version not specified OfficeScan XG version SP1 Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about x86 agent...