Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.6955, which stems from an unrestricted file upload that could result in the upload of arbitrary files...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.7007 that stems from improper deserialization and could lead to pre-authenticated remote code execution...

PT-2025-53551

Уязвимость функции ProcessWhereClause сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption TMEE связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

Trend Micro Endpoint Encryption PolicyServer SQL注入漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from a SQL injection issue that could result in elevated privileges...

PT-2025-53550

Уязвимость функции GetGroupFilteredUsers сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption TMEE связана с использованием изначально опасной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

Trend Micro Apex One和Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Apex One and Trend Micro Worry-Free Business Security Services are both products of Trend Micro, Inc.Trend Micro Apex One is an endpoint protection software.Trend Micro Worry -Free Business Security Services is an endpoint security solution. A security vulnerability exists in Trend...

Trend Micro Internet Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.6955 that originates from a local file inclusion and could lead to remote code execution...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to remote code execution after authentication...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

Trend Micro Deep Security 后置链接漏洞

Trend Micro Deep Security is a server deep security system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security version 20.0 that stems from a link-following issue that could lead to a denial of service...

CVE-2025-49215: Use of Inherently Dangerous Function

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this...

PT-2025-25746

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Worry-Free Business Security affected versions not specified Description An insecure access control issue could allow a local attacker to overwrite key memory-mapped files,...

Trend Micro Apex Central 代码问题漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A code issue vulnerability exists in Trend Micro Apex Central that stems from vulnerability to server-side request forgery attacks that could lead to information disclosure...

Trend Micro Endpoint Encryption PolicyServer 安全漏洞

Trend Micro Endpoint Encryption PolicyServer is a centralized management server from Trend Micro. A security vulnerability exists in Trend Micro Endpoint Encryption PolicyServer that stems from improper deserialization and could lead to pre-authenticated remote code execution...

Trend Micro Apex Central 代码问题漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central that stems from the vulnerability of the modOSCE component to a server-side request forgery attack, which could lead to information disclosure...

PT-2025-25760

Name of the Vulnerable Software and Affected Versions Trend Micro Endpoint Encryption PolicyServer affected versions not specified Description The issue is related to an insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer, which could lead to a post-authenticati...

CVE-2025-30640: Improper Link Resolution Before File Access

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2025-30678: Server-Side Request Forgery (SSRF)

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...