Medium severity5.3NVD Advisory· Published Feb 4, 2021· Updated Jun 17, 2026

CVE-2021-25229

Description

An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Trend Micro Apex Onev5
Range: 2019, SaaS
Trend Micro/Trend Micro OfficeScanv5
Range: XG SP1
Trend Micro/OfficeScan XG SP1llm-fuzzy
Trend Micro/Apex Onellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
Trend Micro/Officescan
cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000284202nvdPatchVendor Advisory
success.trendmicro.com/solution/000284205nvdPatchVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-21-104/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000