Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Trend Micro Apex One, Trend Micro Apex One as a Service 14.0.0.13140, 14.0.14203 Clear all filters
TI-2024-36972 CVE-2024-55917 · GHSA-5mvv-m5qq-g5c2

Origin validation error in Trend Micro Apex One

Priority LOW 36

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2024-12-31 Fixed in 14.0.0.13140, 14.0.14203 CWE-346
TI-2024-36921 CVE-2024-55632 · GHSA-7wgr-j2q7-rjr6

Improper privilege management in Trend Micro Apex One

Priority LOW 36

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00331 Published 2024-12-31 Fixed in 14.0.0.13140, 14.0.14203 CWE-269
TI-2024-36920 CVE-2024-55631 · GHSA-q3mh-2qwc-rr3h

Improper privilege management in Trend Micro Apex One

Priority LOW 36

An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00331 Published 2024-12-31 Fixed in 14.0.0.13140, 14.0.14203 CWE-269
TI-2024-34926 CVE-2024-52050 · GHSA-9jpv-xjww-74vr

Link following in Trend Micro Apex One

Priority LOW 37

A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00476 Published 2024-12-31 Fixed in 14.0.0.13140, 14.0.14203 CWE-59