CVE-2022-41746

2022-10-1000:00:00

trendmicro

www.cve.org

trend micro

apex one

forced browsing

vulnerability

escalate privileges

modify agent groupings

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privileges and modify certain agent groupings. Please note: an attacker must first obtain the ability to log onto the Apex One web console in order to exploit this vulnerability.

CNA Affected

[
  {
    "vendor": "Trend Micro",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "2019 (on-prem) and SaaS",
        "status": "affected"
      }
    ]
  }
]