CVE-2021-25242

CVE-2021-25242 affects Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1. Public sources in the provided documents describe an improper access control vulnerability that allows an unauthenticated user to obtain version and build information. ZDI...

CVE-2021-25242

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...

CVE-2021-25240

The CVE-2021-25240 entry concerns Trend Micro OfficeScan Apex One family products (Apex One on-prem and SaaS, OfficeScan XG SP1, Worry-Free Business Security 10.0 SP1) with an improper access control flaw. The connected advisories confirm that an unauthenticated attacker can disclose x64 agent ho...

CVE-2021-25239

CVE-2021-25239 affects Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry‑Free Business Security 10.0 SP1. The issue is an improper access control that allows an unauthenticated user to obtain information about x86 agent hotfixes. The ZDI advisory notes that the vulnerability exists in ...

CVE-2021-25239

An improper access control vulnerability in Trend Micro Apex One on-prem, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes...

CVE-2021-25238

CVE-2021-25238 maps to Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1. The connected ZDI advisory describes an improper access control vulnerability in the web console that allows unauthenticated remote attackers to disclose information about an agent’s managing port, via...

CVE-2021-25238

An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port...

CVE-2021-25236

CVE-2021-25236 describes a server-side request forgery (SSRF) information disclosure affecting Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1. According to connected sources, unauthenticated attackers can locate online agents via a specific sweep, with exploitation tied t...

CVE-2021-25235

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file...

CVE-2021-25235

This CVE (CVE-2021-25235) affects Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1. The root cause is an improper access control that allows an unauthenticated attacker to obtain information about a content inspection configuration file. The vulnerability enables information disclosu...

CVE-2021-25236

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep...

CVE-2021-25233

CVE-2021-25233 is an improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 that allows an unauthenticated attacker to disclose information about a specific configuration download file. The issue stems from im...

CVE-2021-25232

This CVE (CVE-2021-25232) affects Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1. The issue is an improper access control that allows an unauthenticated user to obtain information about the SQL database. ZDI indicates remote exploitation via the web console (default port 4343), ena...

CVE-2021-25231

CVE-2021-25231 affects Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1. The vulnerability is an improper access control that allows unauthenticated remote attackers to disclose information about a specific hotfix history file via the web conso...

CVE-2021-25230

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file...

CVE-2021-25230

The CVE-2021-25230 entry concerns Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1 with an improper access control flaw that allows an unauthenticated user to obtain information from a scan connection exception file. Public disclosures map the vulnerability to a fault in the web cons...

CVE-2021-25228

This CVE affects Trend Micro OfficeScan/XG and related Apex One/Worry‑Free components. The root cause is improper access control in the web console, allowing an unauthenticated attacker to disclose information (hotfix history/sensitive data). The vulnerability is exploitable remotely via the affe...

CVE-2021-25229

CVE-2021-25229 concerns an improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 that could allow an unauthenticated user to obtain information about the database server. The core issue is access control failure in the product’s components, enablin...

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

CVE-2021-25228

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history...