Read the docs

Trendmicro

Records575All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical73CVSS 9.0–10.0
CVSS high335CVSS 7.0–8.9

Exploited now

Trendmicro records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

35 records in Apex Central · all components

Priority CRITICAL 100KEV

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19481 Published 2022-03-29 No fix listed CWE-345
TI-2025-42709 CVE-2025-69258 · GHSA-mf42-gw23-xrx2

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 55

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03574 Published 2026-01-08 Fixed in Build 7190 CWE-120
Priority MEDIUM 53

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02057 Published 2025-06-17 Fixed in 8.0.7007 CWE-477
Priority MEDIUM 52

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01415 Published 2025-06-17 Fixed in 8.0.7007 CWE-477
TI-2025-30291 CVE-2025-47867 · GHSA-qcjw-3m37-53c6

Injection in Trend Micro Apex Central

Priority MEDIUM 47

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01949 Published 2025-06-17 Fixed in 8.0.6955 CWE-74
Priority MEDIUM 47

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04138 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-434
TI-2023-15812 CVE-2023-32530 · GHSA-2q7m-x86h-9rm9

SQL injection in Trend Micro Apex Central

Priority MEDIUM 45

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02425 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-89
TI-2023-15811 CVE-2023-32529 · GHSA-55vx-hqgf-25fw

SQL injection in Trend Micro Apex Central

Priority MEDIUM 44

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02161 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-89
TI-2025-42711 CVE-2025-69260 · GHSA-p5v2-mqcc-2j93

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 42

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01576 Published 2026-01-08 Fixed in Build 7190 CWE-120
TI-2025-42710 CVE-2025-69259 · GHSA-f57h-h252-h773

Buffer overflow in Trend Micro Apex Central

Priority MEDIUM 42

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01576 Published 2026-01-08 Fixed in Build 7190 CWE-120
Priority LOW 34

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02454 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-79
Priority LOW 33

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2025-06-17 Fixed in 8.0.6955 CWE-475
Priority LOW 33

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00299 Published 2025-06-17 Fixed in 8.0.6955 CWE-918
Priority LOW 33

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected install…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2025-06-17 Fixed in 8.0.6955 CWE-918
Priority LOW 33

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected install…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2025-06-17 Fixed in 8.0.6955 CWE-918
Priority LOW 32

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00553 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-918
Priority LOW 32

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02454 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-79
Priority LOW 32

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02454 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 29

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00936 Published 2024-01-23 Fixed in 8.0.0.6570 CWE-79
Load more
Open these records in search →