CVE-2020-25774: Trend Micro Apex One

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

• Trend Micro Apex One: version 2019 only; version saas only

Published 2020-09-29. Last modified 2026-06-17.