Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024)

Overview Trend Micro Apex One and Apex One as a Service contain multiple vulnerabilities. Trend Micro Incorporated has released multiple security updates for Trend Micro Apex One and Apex One as a Service. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the...

PT-2024-35106 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could exploit a LogServer arbitrary file creation issue to escalate privileges on affected installations. The attacker must first obtain the ability to execute...

PT-2024-36567 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. An attacker must first obta...

PT-2024-35103 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could exploit a LogServer link following vulnerability in Trend Micro Apex One to escalate privileges on affected installations. This issue requires the attack...

PT-2024-36609 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: An origin validation error could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged...

PT-2024-35104 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could exploit a LogServer link following vulnerability in Trend Micro Apex One to escalate privileges on affected installations. The attacker must first obtain...

PT-2024-36566 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could exploit an engine link following issue to escalate privileges on affected installations. The attacker must first obtain the ability to execute...

PT-2025-12812 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could bypass existing security and execute arbitrary code on affected installations by exploiting a vulnerability in the Trend Micro Apex One Security Agent...

PT-2025-25240 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One security agent affected versions not specified Description: An uncontrolled search path issue allows a local attacker to escalate privileges on affected installations, but the attacker must first obtain the ability to...

Trend Micro Apex One Multiple Vulnerabilities (KA-0016669)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12980 and Agent Build 12980. It is, therefore, affected by multiple vulnerabilities, including the following: - An origin validation vulnerability in the...

PT-2025-25272 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation, which could lead to a pre-authentication remote code execution on affected installations. This vulnerability is...

PT-2025-25271 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected...

PT-2024-41132 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central affected versions not specified Description: The issue is related to insufficient validation of incoming requests in Trend Micro Apex Central, a security monitoring and management tool. This can be exploited by a remo...

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-39753

CVE-2024-39753 involves a modOSCE SQL Injection in Trend Micro Apex One (and Apex One as a Service) that can lead to remote code execution. Affected component is the client management functionality; the vulnerability arises from unsafely built SQL queries using untrusted input. Exploitation requi...

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

Trend Micro Apex One和Trend Micro Apex One as a Service SQL注入漏洞

Trend Micro Apex One and Trend Micro Apex One as a Service are both products of Trend Micro, Inc.Trend Micro Apex One is an endpoint protection software.Trend Micro Apex One as a Service is an Trend Micro Apex One as a Service is an enhanced endpoint security solution. A security vulnerability...

MAL-2024-9199 Malicious code in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f8e217b061367a2544f69c657e9f3d6cc3535698498abe94f975e9147d708e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...