CVE-2021-25229

2021-02-0419:36:38

trendmicro

www.cve.org

trend micro

apex one

officescan xg

vulnerability

access control

database server

AI Score

5.5

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server.

CNA Affected

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019, SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "XG SP1"
      }
    ]
  }
]