CVE-2021-25236

CVE-2021-25236: vulnerability in Trend Micro OfficeScan

Published · Updated

Follow this CVE+ Monitor Trend Micro OfficeScan+ Monitor Trend Micro Worry-Free Business Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.
Affected products
Trend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Worry-Free Business Security
Related CVEs — Trend Micro OfficeScan

In the same product, most dangerous first.

CVE-2019-18187HIGHCVE-2019-18187EPSS 25.1%KEVCVE-2021-36741HIGHCVE-2021-36741EPSS 5.0%KEVCVE-2020-24557HIGHCVE-2020-24557EPSS 2.7%KEVCVE-2021-36742HIGHCVE-2021-36742EPSS 1.5%KEVCVE-2017-11394—CVE-2017-11394EPSS 66.8%CVE-2017-11393—CVE-2017-11393EPSS 15.9%