CVE-2022-45798

🗓️ 22 Dec 2022 21:24:44Reported by trendmicroType

Link following vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service allows local attacker to escalate privileges by creating a symbolic link. Target system requires execution of low-privileged code to exploit

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-45798	24 Dec 202202:14	–	circl
CNNVD	Trend Micro Apex One和Trend Micro Apex One as a Service 后置链接漏洞	24 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-45798	22 Dec 202221:24	–	cvelist
EUVD	EUVD-2022-48654	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service	26 Dec 202207:21	–	jvn
NVD	CVE-2022-45798	24 Dec 202200:15	–	nvd
Prion	Spoofing	24 Dec 202200:15	–	prion
Positive Technologies	PT-2022-27645 · Trend Micro · Trend Micro Apex One +1	15 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-45798	22 May 202521:47	–	redhatcve
Tenable Nessus	Trend Micro Apex One Multiple Vulnerabilities (000291830)	13 Feb 202300:00	–	nessus

NVD

Node

trendmicro apex_oneMatch-saas

trendmicro apex_oneMatch2019-

AND

microsoft windowsMatch-

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "On Premise (14.0)",
        "status": "affected",
        "lessThan": "14.0.0.11136",
        "versionType": "semver"
      },
      {
        "version": "SaaS (14.0)",
        "status": "affected",
        "lessThan": "14.0.11840",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000291830
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-1665/

15 Apr 2025 14:15Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.00172

SSVC

CWE-59