Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Trend Micro TrendAI Apex One, TrendAI Apex One as a Service 14.0.0.14136, 14.0.20315 Clear all filters
TI-2025-43348 CVE-2025-71213 · GHSA-gjcg-gjrc-j6xp

Origin validation error in TrendAI Apex One

Priority LOW 36

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-346
TI-2025-43347 CVE-2025-71212 · GHSA-mp94-hxv8-mxq5

Link following in TrendAI Apex One

Priority LOW 37

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00544 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-59
TI-2025-43346 CVE-2025-71211 · GHSA-qvww-2vwg-9rp6

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03754 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22
TI-2025-43345 CVE-2025-71210 · GHSA-vhc8-fg3x-3rvc

Path traversal in TrendAI Apex One

Priority MEDIUM 55

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03811 Published 2026-05-21 Fixed in 14.0.0.14136, 14.0.20315 CWE-22