CVE-2021-25246: vulnerability in Trend Micro Apex One
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.8%
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.
Affected products
Trend Micro · Trend Micro Apex OneTrend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Worry-Free Business SecurityRelated CVEs — Trend Micro Apex One
In the same product, most dangerous first.