Vaibhav Kumar Srivastava

**Name of the Vulnerable Software and Affected Versions** Trend Vision One (affected versions not specified) **Description** A broken access control issue in the Trend Vision One User Account component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Vision One (affected versions not specified) **Description** A broken access control issue was previously discovered in the Trend Vision One User Roles component. This could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Vision One Status component (affected versions not specified) **Description** A broken access control issue was previously discovered in the Trend Vision One Status component. This could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. The issue has already been addressed on the backend service and is no longer considered an active vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Vision One (affected versions not specified) **Description** A broken access control issue in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. This issue has already been addressed on the backend service and is no longer considered an active vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Vision One (affected versions not specified) **Description** An HTML injection issue was previously discovered, potentially allowing a malicious user to execute arbitrary code. This issue has already been addressed on the backend service and is no longer considered an active vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.