CVE-2021-25239

An improper access control vulnerability in Trend Micro Apex One on-prem, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes...

CVE-2021-25238

An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port...

CVE-2021-25238

CVE-2021-25238 maps to Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1. The connected ZDI advisory describes an improper access control vulnerability in the web console that allows unauthenticated remote attackers to disclose information about an agent’s managing port, via...

CVE-2021-25237

An improper access control vulnerability in Trend Micro Apex One on-prem could allow an unauthenticated user to obtain information about the managing port used by agents...

CVE-2021-25237

CVE-2021-25237 affects Trend Micro Apex One (on-prem) and stems from an improper access control flaw in the web console that allows an unauthenticated attacker to disclose information about the managing port used by agents. Public details in the connected documents indicate the issue enables remo...

CVE-2021-25235

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file...

CVE-2021-25235

This CVE (CVE-2021-25235) affects Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1. The root cause is an improper access control that allows an unauthenticated attacker to obtain information about a content inspection configuration file. The vulnerability enables information disclosu...

CVE-2021-25236

CVE-2021-25236 describes a server-side request forgery (SSRF) information disclosure affecting Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1. According to connected sources, unauthenticated attackers can locate online agents via a specific sweep, with exploitation tied t...

CVE-2021-25236

A server-side request forgery SSRF information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep...

CVE-2021-25234

CVE-2021-25234 is an improper access control vulnerability affecting Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1. The connected sources describe an unauthenticated attacker being able to obtain information about a specific notification con...

CVE-2021-25234

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file...

CVE-2021-25232

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database...

CVE-2021-25233

CVE-2021-25233 is an improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 that allows an unauthenticated attacker to disclose information about a specific configuration download file. The issue stems from im...

CVE-2021-25233

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific configuration download file...

CVE-2021-25232

This CVE (CVE-2021-25232) affects Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1. The issue is an improper access control that allows an unauthenticated user to obtain information about the SQL database. ZDI indicates remote exploitation via the web console (default port 4343), ena...

CVE-2021-25231

CVE-2021-25231 affects Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1. The vulnerability is an improper access control that allows unauthenticated remote attackers to disclose information about a specific hotfix history file via the web conso...

CVE-2021-25231

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific hotfix history file...

CVE-2021-25230

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file...

CVE-2021-25230

The CVE-2021-25230 entry concerns Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1 with an improper access control flaw that allows an unauthenticated user to obtain information from a scan connection exception file. Public disclosures map the vulnerability to a fault in the web cons...

CVE-2021-25228

This CVE affects Trend Micro OfficeScan/XG and related Apex One/Worry‑Free components. The root cause is improper access control in the web console, allowing an unauthenticated attacker to disclose information (hotfix history/sensitive data). The vulnerability is exploitable remotely via the affe...