Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023)

🗓️ 10 Aug 2023 07:04:10Reported by Japan Vulnerability NotesType

Trend Micro Apex Central has multiple server-side forgery vulnerabilities; Patch 5 build 6481 fixes them.

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of the modDeepSecurity module in the monitoring and security management widget of Trend Micro Apex Central allows a attacker to perform an SSRF attack.	16 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the modTXSOt module in the monitoring and security management widgets of Trend Micro Apex Central allows a attacker to perform an SSRF attack.	16 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the modVulnerabilityProtect widget in the monitoring and security management panel of Trend Micro Apex Central allows a attacker to perform an SSRF attack.	16 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the modTMSL module in the monitoring and security management panel of Trend Micro Apex Central allows a attacker to perform an SSRF attack.	16 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-38624	23 Jan 202422:26	–	circl
Circl	CVE-2023-38625	23 Jan 202422:26	–	circl
Circl	CVE-2023-38626	23 Jan 202422:26	–	circl
Circl	CVE-2023-38627	23 Jan 202422:26	–	circl
CNNVD	Trend Micro Apex Central Security Vulnerability	23 Jan 202400:00	–	cnnvd
CNNVD	Trend Micro Apex Central Security Vulnerability	23 Jan 202400:00	–	cnnvd

Source	Link
success	www.success.trendmicro.com/dcx/s/solution/000294176
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
jvn	www.jvn.jp/en/vu/JVNVU98367862/index.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38624
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38625
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38626
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38627

13 Mar 2024 08:58Current

7.1High risk

Vulners AI Score7.1

CVSS 35.4

CVSS 3.15.4

EPSS0.00358

SSVC