Vulnerabilities > Trendmicro > Apex ONE > 2019
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-12-01 | CVE-2020-28582 | Unspecified vulnerability in Trendmicro Apex ONE and Officescan An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents. | 5.3 |
| 2020-12-01 | CVE-2020-28577 | Unspecified vulnerability in Trendmicro Apex ONE and Officescan An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names. | 5.3 |
| 2020-12-01 | CVE-2020-28576 | Unspecified vulnerability in Trendmicro Apex ONE and Officescan An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information. | 5.3 |
| 2020-12-01 | CVE-2020-28573 | Unspecified vulnerability in Trendmicro Apex ONE and Officescan An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server. | 5.3 |
| 2020-11-18 | CVE-2020-28572 | Unspecified vulnerability in Trendmicro Apex ONE 2019 A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege. | 7.8 |
| 2020-09-29 | CVE-2020-25774 | Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. | 4.3 |
| 2020-09-29 | CVE-2020-25773 | Double Free vulnerability in Trendmicro Apex ONE 2019/Saas A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. | 7.8 |
| 2020-09-29 | CVE-2020-25772 | Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. | 5.5 |
| 2020-09-29 | CVE-2020-25771 | Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. | 5.5 |
| 2020-09-29 | CVE-2020-25770 | Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. | 5.5 |