Vulnerabilities > Trendmicro > Apex ONE > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-02-04 CVE-2021-25228 Unspecified vulnerability in Trendmicro Apex One, Officescan and Worry-Free Business Security
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history.
network
low complexity
trendmicro
5.3
2020-12-01 CVE-2020-28583 Unspecified vulnerability in Trendmicro Apex ONE and Officescan
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.
network
low complexity
trendmicro
5.3
2020-12-01 CVE-2020-28582 Unspecified vulnerability in Trendmicro Apex ONE and Officescan
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.
network
low complexity
trendmicro
5.3
2020-12-01 CVE-2020-28577 Unspecified vulnerability in Trendmicro Apex ONE and Officescan
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.
network
low complexity
trendmicro
5.3
2020-12-01 CVE-2020-28576 Unspecified vulnerability in Trendmicro Apex ONE and Officescan
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.
network
low complexity
trendmicro
5.3
2020-12-01 CVE-2020-28573 Unspecified vulnerability in Trendmicro Apex ONE and Officescan
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.
network
low complexity
trendmicro
5.3
2020-09-29 CVE-2020-25774 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account.
network
low complexity
trendmicro CWE-125
4.3
2020-09-29 CVE-2020-25772 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
5.5
2020-09-29 CVE-2020-25771 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
5.5
2020-09-29 CVE-2020-25770 Out-of-bounds Read vulnerability in Trendmicro Apex ONE 2019/Saas
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product.
local
low complexity
trendmicro CWE-125
5.5