Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro OfficeScan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue...

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro OfficeScan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue...

Trend Micro Apex One Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

CentOS 8 : kernel (CESA-2019:1167)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1167 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...

CentOS 8 : virt:rhel (CESA-2019:1175)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1175 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...

PT-2021-16466

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated...

PT-2021-16486

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds read information disclosure issue could allow an attacker to disclose sensitive information abou...

PT-2021-16480

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: The issue is related to improper access control, which could allow an unauthenticated user to obtain version and build...

PT-2021-16484

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security affected versions no...

PT-2021-16481

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain patch level information. Recommendations: For Trend Micr...

PT-2021-16474

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a...

PT-2021-16477

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem version not specified OfficeScan XG version SP1 Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about x86 agent...

PT-2021-16476

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: An improper access control information disclosure issue could allow an unauthenticated user to obtain information about an agent's...

PT-2021-16479

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One version 10.0 SP1 Worry-Free Business Security version 10.0 SP1 Description: A server-side request forgery SSRF information disclosure issue could allow an unauthenticated user to locate online agents via a sweep. This iss...

PT-2021-16487

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions not specified OfficeScan XG SP1 version not specified Worry-Free Business Security versions 10.0 SP1 and Services Description: An out-of-bounds write information disclosure issue could allow a local attacker to...

PT-2021-16473

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified Trend Micro OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about a content inspectio...

PT-2021-16475

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem affected versions not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the managing port used by agents. There is no information provided abou...

PT-2021-16478

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One versions affected versions not specified Trend Micro OfficeScan XG SP1 Trend Micro Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain x64 agen...

PT-2021-16469

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific hotfix history file...