324 matches found
CVE-2021-28645
CVE-2021-28645 affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1. The root cause is an incorrect permissions assignment on a resource used by the ApexOne Security Agent, enabling a local attacker who can run low-privileged code to escalate to higher privileges (up to SYST...
CVE-2021-25253
CVE-2021-25253 affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1. The issue is caused by improper access control on a resource used by the Apex One service, enabling a local attacker who can run low-privilege code to escalate privileges (often to SYSTEM) on affected insta...
CVE-2021-25250
The CVE-2021-25250 issue affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1, with the vulnerable component identified as the ApexOne Security Agent. The root cause is an improper access control that sets incorrect permissions on a sensitive file, enabling a local attacker ...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan that stems from an improper access control vulnerability in Trend Micro Apex One,...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan and an incorrect privilege assignment vulnerability in Trend Micro Apex One, Apex...
Trend Micro Apex One and OfficeScan XG Access Control Error Vulnerabilities
Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...
Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities (CNVD-2021-28307)
Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...
Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities (CNVD-2021-28308)
Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...
CVE-2021-25242
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...
CVE-2021-25242
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...
CVE-2021-25243
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information...
CVE-2021-25246
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration...
CVE-2021-25249
An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain...
CVE-2021-25246
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration...
CVE-2021-25239
An improper access control vulnerability in Trend Micro Apex One on-prem, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes...
CVE-2021-25232
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database...
CVE-2021-25229
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...
CVE-2021-25228
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history...
CVE-2021-25234
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file...
CVE-2021-25234
An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file...