Medium severity4.3NVD Advisory· Published Sep 29, 2020· Updated Jun 17, 2026

CVE-2020-25774

Description

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Trend Micro Apex Onev5
Range: 2009, SaaS
Trend Micro/Apex One ServerMigrationToolllm-create
Trend Micro/Apex Onellm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:apex_one:saas:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000271974nvdVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-20-1225/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000