Show filters
137 Total Results
Displaying 101-110 of 137
Sort by:
Attacker Value
Unknown

CVE-2021-25242

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information.
Attacker Value
Unknown

CVE-2021-25232

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database.
Attacker Value
Unknown

CVE-2021-25239

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes.
Attacker Value
Unknown

CVE-2021-25241

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a sweep.
Attacker Value
Unknown

CVE-2021-25249

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Attacker Value
Unknown

CVE-2021-25228

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history.
Attacker Value
Unknown

CVE-2021-25235

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file.
Attacker Value
Unknown

CVE-2021-25229

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server.
Attacker Value
Unknown

CVE-2021-25243

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information.
Attacker Value
Unknown

CVE-2021-25246

Disclosure Date: February 04, 2021 (last updated February 22, 2025)
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.