CVE-2023-32534
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.8%
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.
This is similar to, but not identical to CVE-2023-32531 through 32535.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| trendmicro:apex_central | trendmicro apex central | eq | 2019 |
CNA Affected
[
{
"vendor": "Trend Micro, Inc.",
"product": "Trend Micro Apex Central",
"versions": [
{
"version": "2019 (8.0)",
"status": "affected",
"versionType": "semver",
"lessThan": "8.0.0.6394"
}
]
}
]Related
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.8%