Medium severity5.3NVD Advisory· Published Dec 1, 2020· Updated Jun 17, 2026

CVE-2020-28577

Description

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Apex Onellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
Trend Micro/OfficeScan XG SP1llm-fuzzy
Trend Micro/Trend Micro Apex Onev5
Range: 2019
Trend Micro/Trend Micro OfficeScanv5
Range: XG SP1
Trend Micro/Officescan
cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000281947nvdVendor Advisory
success.trendmicro.com/solution/000281949nvdVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-20-1376/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000