CVE-2020-28576: Trend Micro Apex One

Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days.

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.

Affected products

• Trend Micro Apex One: version 2019 only
• Trend Micro OfficeScan: version xg only

Published 2020-12-01. Last modified 2026-06-17.