CVE-2023-52328

2024-01-2320:42:01

trendmicro

www.cve.org

trend micro

apex central

xss

remote code execution

vulnerability

cve-2023-52328

on-premise

cross-site scripting

EPSS

0.001

Percentile

49.0%

JSON

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers.

Please note this vulnerability is similar, but not identical to CVE-2023-52329.

CNA Affected

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex Central",
    "versions": [
      {
        "version": "2019",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.0.0.6570"
      }
    ]
  }
]