CVE-2021-25236

State: Published
Severity: Not scored
Published: Feb 4, 2021
Updated: Aug 3, 2024
Reserved: Jan 15, 2021

Description

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Trend Micro OfficeScanTrend Micro	XG SP1Affected
Trend Micro Worry-Free Business SecurityTrend Micro	10.0 SP1Affected

References

https://success.trendmicro.com/solution/000284205
https://success.trendmicro.com/solution/000284206
https://www.zerodayinitiative.com/advisories/ZDI-21-120/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.