Trendmicro

Apex One

163 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2021-25235

  • EPSS 2.08%
  • Veröffentlicht 04.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:54:36

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file.

5.3

CVE-2021-25237

  • EPSS 1.57%
  • Veröffentlicht 04.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:54:36

An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port used by agents.

5.3

CVE-2021-25239

  • EPSS 2.09%
  • Veröffentlicht 04.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:54:36

An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes.

5.3

CVE-2021-25240

  • EPSS 2.09%
  • Veröffentlicht 04.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:54:36

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain x64 agent hofitx information.

5.3

CVE-2020-28576

  • EPSS 3.21%
  • Veröffentlicht 01.12.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:22:56

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.

5.3

CVE-2020-28577

  • EPSS 3.21%
  • Veröffentlicht 01.12.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:22:56

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

5.3

CVE-2020-28582

  • EPSS 3.21%
  • Veröffentlicht 01.12.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:22:56

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.

5.3

CVE-2020-28583

  • EPSS 3.21%
  • Veröffentlicht 01.12.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:22:57

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.

5.3

CVE-2020-28573

  • EPSS 3.21%
  • Veröffentlicht 01.12.2020 19:15:11
  • Zuletzt bearbeitet 21.11.2024 05:22:55

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.

7.8

CVE-2020-28572

  • EPSS 0.42%
  • Veröffentlicht 18.11.2020 19:15:11
  • Zuletzt bearbeitet 21.11.2024 05:22:55

A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege.