Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-28583

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.

  • Published: Dec 1, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-28583
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
trendmicro / officescan xg-sp1 xg-sp1.x
trendmicro / apex_one 2019 2019.x