Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2023-10610 CVE-2023-25148 · GHSA-3wpp-5prr-27h8

Link following in Trend Micro Apex One

Priority LOW 36

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0039 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-59
Priority LOW 31

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update p…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00233 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-427
TI-2023-10608 CVE-2023-25146 · GHSA-qvqh-m74g-fqcf

Link following in Trend Micro Apex One

Priority LOW 36

A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimate…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0039 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-59
TI-2023-10607 CVE-2023-25145 · GHSA-63p5-chvq-vhq6

Link following in Trend Micro Apex One

Priority LOW 36

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0039 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-59
Priority LOW 36

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00304 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-269
Priority MEDIUM 52

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01742 Published 2023-03-07 Fixed in 14.0.0.11564 CWE-427