Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2023-15839 CVE-2023-32557 · GHSA-mmj6-r83c-hq4f

Path traversal in Trend Micro Apex One

Priority MEDIUM 51

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01221 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-22
TI-2023-15838 CVE-2023-32556 · GHSA-rxxg-crv8-fgvm

Link following in Trend Micro Apex One

Priority LOW 25

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00286 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-59
Priority LOW 32

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00184 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-367
Priority LOW 32

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00184 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-367
Priority LOW 31

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive information on agents.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0049 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-346
Priority LOW 24

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected reg…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2023-06-26 Fixed in 14.0.0.12024 CWE-276