Server-Side Request Forgery (SSRF) Information Disclosure Vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1

Server-Side Request Forgery (SSRF) Information Disclosure Vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1

CVE-2021-25236 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.

Learn more about our Cis Benchmark Audit For Microsoft Office.