CVE-2023-32532

🗓️ 26 Jun 2023 21:54:53Reported by trendmicroType

Certain dashboard widgets on Trend Micro Apex Central vulnerable to cross-site scripting (XSS) attacks

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.	26 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-32532	27 Jun 202302:22	–	circl
CNNVD	Trend Micro Apex Central 跨站脚本漏洞	26 Jun 202300:00	–	cnnvd
CNVD	Trend Micro Apex Central cross-site scripting vulnerability (CNVD-2023-57663)	29 May 202300:00	–	cnvd
Cvelist	CVE-2023-32532	26 Jun 202321:54	–	cvelist
EUVD	EUVD-2023-36776	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Security updates for multiple Trend Micro products for enterprises (June 2023)	14 Jun 202305:47	–	jvn
NVD	CVE-2023-32532	26 Jun 202322:15	–	nvd
OSV	CVE-2023-32532	26 Jun 202322:15	–	osv
Prion	Cross site scripting	26 Jun 202322:15	–	prion

NVD

Node

trendmicro apex_centralMatch2019-

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex Central",
    "versions": [
      {
        "version": "2019 (8.0)",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.0.0.6394"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-723/
success	www.success.trendmicro.com/dcx/s/solution/000293107

17 Jun 2026 05:59Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.01873

SSVC

CWE-79