Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2020-28576

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.

  • Published: Dec 1, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-28576
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
trendmicro / officescan xg-sp1 xg-sp1.x
trendmicro / apex_one 2019 2019.x