Lucene search
+L

391 matches found

CNVD
CNVD
added 2024/01/16 12:00 a.m.47 views

Trend Micro Apex Central cross-site scripting vulnerability (CNVD-2024-04937)

Trend Micro Apex Central is a Web-based product console from Trend Micro. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...

6.1CVSS5.9AI score0.02475EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/16 12:00 a.m.28 views

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.1CVSS7.5AI score0.02475EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/01/16 12:00 a.m.47 views

Trend Micro Apex Central Cross-Site Scripting Vulnerability (CNVD-2024-04938)

Trend Micro Apex Central is a Web-based product console from Trend Micro. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...

6.1CVSS5.9AI score0.02475EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/16 12:00 a.m.11 views

PT-2024-14527 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue concerns certain dashboard widgets in Trend Micro Apex Central that are susceptible to cross-site scripting XSS attacks. These attacks may potentially...

6.1CVSS6.4AI score0.02475EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2024/01/16 12:00 a.m.22 views

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.1CVSS7.5AI score0.02475EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/16 12:00 a.m.11 views

PT-2024-14525 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue concerns certain dashboard widgets in Trend Micro Apex Central that are susceptible to cross-site scripting XSS attacks. These attacks may potentially...

6.1CVSS6.4AI score0.02475EPSS
SaveExploits0References6
CNVD
CNVD
added 2024/01/16 12:00 a.m.55 views

Trend Micro Apex Central cross-site scripting vulnerability (CNVD-2024-04936)

Trend Micro Apex Central is a Web-based product console from Trend Micro. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...

6.1CVSS5.9AI score0.02475EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/01/16 12:00 a.m.59 views

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro Apex Central is a Web-based product console from Trend Micro. An arbitrary file upload vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to create arbitrary files on an affected installation...

8.8CVSS6.9AI score0.04172EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.24 views

Trend Micro Apex Central modVulnerabilityProtect Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modVulnerabilityProtect module. The issue results from the lack of prop...

9.1CVSS6.4AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.32 views

Trend Micro Apex Central Cross-Site Scripting Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the Policy Management functionality. The issue results from the lack of proper...

5.4CVSS7.5AI score0.02434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/10 12:00 a.m.29 views

Trend Micro Apex Central widget WFProxy Local File Inclusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the getObjWGFServiceApiByApiName function. The issue results from the lack of prope...

7.5CVSS7.5AI score0.04536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/10 12:00 a.m.12 views

PT-2024-14524 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central affected versions not specified Description: A local file inclusion issue in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. This issue must...

7.5CVSS7.6AI score0.04536EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/01/09 12:00 a.m.15 views

PT-2024-1670 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central affected versions not specified Description: The issue exists due to a lack of protection for the web page structure in Trend Micro Apex Central, allowing for cross-site scripting XSS attacks. This could enable a remo...

6.4CVSS6.3AI score0.00936EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.11 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

4.1CVSS6AI score0.00332EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.10 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

5.5CVSS6AI score0.00332EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.13 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

4.1CVSS6AI score0.00332EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.12 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

4.1CVSS6AI score0.00332EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.10 views

The vulnerability of the modVulnerabilityProtect widget in the monitoring and security management panel of Trend Micro Apex Central allows a attacker to perform an SSRF attack.

The vulnerability of the modVulnerabilityProtect widget in the monitoring and security management panel of Trend Micro Apex Central is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

9.1CVSS6.3AI score0.00321EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.11 views

The vulnerability of the modTMSL module in the monitoring and security management panel of Trend Micro Apex Central allows a attacker to perform an SSRF attack.

The vulnerability of the modTMSL module in the monitoring and security management widgets of Trend Micro Apex Central relates to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

9.1CVSS6.3AI score0.00328EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:00 a.m.15 views

The vulnerability of the modTXSOt module in the monitoring and security management widgets of Trend Micro Apex Central allows a attacker to perform an SSRF attack.

The vulnerability of the modTXSO widget in the monitoring panel of the Trend Micro Apex Central security management tool is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

9.1CVSS6.5AI score0.00321EPSS
SaveExploits0References4
Rows per page
Query Builder