Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-28577

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

  • Published: Dec 1, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-28577
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
trendmicro / officescan xg-sp1 xg-sp1.x
trendmicro / apex_one 2019 2019.x