Skip to content
OpenAdvisories
Unscored CVE-2021-25241 EUVD-2021-12152GHSA-hj87-9mrp-3rp8

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1…

Published Feb 4, 2021 · Updated Aug 3, 2024 · Assigned by trendmicro

Vendor: Trend Micro Product: Trend Micro Apex One Product: Trend Micro Worry-Free Business Security

Description

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a sweep.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019, SaaS —
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1 —

References