Skip to content
OpenAdvisories
Unscored CVE-2021-25236 EUVD-2021-12147GHSA-6hx5-9q4p-p96w

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security…

Published Feb 4, 2021 · Updated Aug 3, 2024 · Assigned by trendmicro

Description

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro OfficeScan XG SP1 —
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1 —

References