CVE-2023-34145

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34145

The connected Nessus plugin for Trend Micro Apex One (000293322) confirms CVE-2023-34145 affects Trend Micro Apex One and Apex One as a Service, due to an untrusted search path vulnerability that allows local privilege escalation. Exploitation requires the attacker to already run low-privilege co...

CVE-2023-34145

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34144

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34144

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34144

CVE-2023-34144 affects Trend Micro Apex One and Apex One as a Service security agent. The vulnerability is an untrusted search path issue that could allow a local attacker to escalate privileges on eligible installations. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2023-32605

Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...

CVE-2023-32605

Trend Micro Apex Central (on-premise) is affected by CVE-2023-32605, which describes an authenticated reflected cross-site scripting (XSS) vulnerability caused by user input validation and sanitization issues. An attacker must first authenticate to the Apex Central system to exploit this vulnerab...

CVE-2023-32605

Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...

CVE-2023-32604

Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...

CVE-2023-32604

Affected versions Trend Micro Apex Central on-premise are vulnerable to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order ...

CVE-2023-32604

CVE-2023-32604 affects Trend Micro Apex Central (on-premise). The vulnerability is an authenticated, reflected cross-site scripting (XSS) issue caused by insufficient input validation and sanitization. An attacker must first authenticate to the Apex Central system to exploit the vulnerability. Th...

CVE-2023-32557

CVE-2023-32557 corresponds to a path traversal vulnerability in Trend Micro Apex One and Apex One as a Service that allows an unauthenticated attacker to upload an arbitrary file to the Management Server, enabling remote code execution with system privileges. The issue is documented across multip...

CVE-2023-32557

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges...

CVE-2023-32556

Trend Micro Apex One and Apex One as a Service agent are affected by CVE-2023-32556, a link-following vulnerability that could allow a local attacker to disclose sensitive information. The issue requires the attacker to obtain the ability to execute low-privileged code on the target system. The N...

CVE-2023-32556

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-32555

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2023-32555

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2023-32555

CVE-2023-32555 concerns Trend Micro Apex One and Apex One as a Service agent. It describes a Time-of-Check Time-Of-Use vulnerability that could allow a local attacker to escalate privileges on affected installations, requiring the attacker to first run low-privileged code. The provided documents ...

CVE-2023-32554

Technical details for CVE-2023-32554 are not publicly available in the provided documents. No confirmed affected products, versions, or fixes are disclosed here. Monitor for updates from official advisories to obtain concrete impact, remediation, and exploitation information.