CVE-2023-32535

2023-06-2621:55:24

trendmicro

www.cve.org

trend micro apex central

cross-site scripting attacks

remote code execution

dashboard widgets

0.002 Low

EPSS

Percentile

56.8%

JSON

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

This is similar to, but not identical to CVE-2023-32531 through 32534.

CNA Affected

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex Central",
    "versions": [
      {
        "version": "2019 (8.0)",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.0.0.6394"
      }
    ]
  }
]