Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority LOW 24

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00332 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 24

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00332 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 24

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00332 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 24

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00332 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 28

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
Priority LOW 31

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01857 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-79
TI-2023-15812 CVE-2023-32530 · GHSA-2q7m-x86h-9rm9

SQL injection in Trend Micro Apex Central

Priority MEDIUM 45

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02425 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-89
TI-2023-15811 CVE-2023-32529 · GHSA-55vx-hqgf-25fw

SQL injection in Trend Micro Apex Central

Priority MEDIUM 44

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02161 Published 2023-06-26 Fixed in 8.0.0.6394 CWE-89