Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 37

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00629 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-284
Priority LOW 26

A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0078 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-200
TI-2024-24116 CVE-2024-36306 · GHSA-g8p3-9gvf-5crg

Link following in Trend Micro Apex One

Priority LOW 28

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00614 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-59
TI-2024-24115 CVE-2024-36305 · GHSA-944p-q32m-rghv

Link following in Trend Micro Apex One

Priority LOW 38

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00889 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-59
Priority LOW 36

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00401 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-367
Priority LOW 36

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00354 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-346
Priority LOW 37

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00552 Published 2024-06-10 Fixed in 14.0.0.12980, 14.0.13139 CWE-346