CVE-2021-25232

CVE-2021-25232: vulnerability in Trend Micro Apex One

Published · Updated

Follow this CVE+ Monitor Trend Micro Apex One+ Monitor Trend Micro OfficeScan

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database.
Affected products
Trend Micro · Trend Micro Apex OneTrend Micro · Trend Micro OfficeScan
Related CVEs — Trend Micro Apex One

In the same product, most dangerous first.

CVE-2019-18187HIGHCVE-2019-18187EPSS 25.1%KEVCVE-2021-36741HIGHCVE-2021-36741EPSS 5.0%KEVCVE-2022-40139HIGHCVE-2022-40139EPSS 3.4%KEVCVE-2020-24557HIGHCVE-2020-24557EPSS 2.7%KEVCVE-2021-36742HIGHCVE-2021-36742EPSS 1.5%KEVCVE-2017-11394—CVE-2017-11394EPSS 66.8%