CVE-2023-52331

The CVE-2023-52331 issue is a post-authenticated SSRF vulnerability in Trend Micro Apex Central. Affected software/function: Apex Central; attacker must first execute low-privilege code on the target. Impact: can interact with internal or local services directly; potential information disclosure ...

CVE-2023-52330

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2023-52330

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2023-52330

CVE-2023-52330 describes a cross-site scripting vulnerability in Trend Micro Apex Central. The issue affects the Apex Central web interface and allows a remote attacker to execute arbitrary code in the context of the compromised user after the user visits a crafted page/file. Some sources (ZDI-24...

CVE-2023-52329

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

CVE-2023-52329

CVE-2023-52329 affects the on‑premise Trend Micro Apex Central product. The issue concerns vulnerable dashboard widgets that permit cross‑site scripting (XSS), with the potential consequence described as remote code execution on affected servers. The vulnerability is noted as similar to CVE‑2023‑...

CVE-2023-52329

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

CVE-2023-52328

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...

CVE-2023-52328

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...

CVE-2023-52328

CVE-2023-52328 concerns Trend Micro Apex Central (on-premise) where certain dashboard widgets are vulnerable to cross-site scripting (XSS). The root cause and exact affected versions are not detailed in the provided documents; the descriptions only state an XSS flaw that may allow an attacker to ...

CVE-2023-52327

Technical details for CVE-2023-52327 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2023-52327

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

CVE-2023-52327

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

CVE-2023-52326

CVE-2023-52326 affects Trend Micro Apex Central (on-premise) dashboard widgets and is described as a cross-site scripting (XSS) vulnerability that may allow an attacker to achieve remote code execution on affected servers. Connected sources confirm the issue relates to on-premise components in th...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52325

Trend Micro Apex Central is affected by a widget local file inclusion vulnerability that can lead to remote code execution . The underlying issue is inadequate validation of user-supplied data before it is used in a PHP include, specifically in the getObjWGFServiceApiByApiName function. Exploitat...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52324

CVE-2023-52324 affects Trend Micro Apex Central and describes an unrestricted file upload vulnerability that enables a remote attacker to create arbitrary files on affected installations. The core issue involves improper validation during file uploads (notably ZIP handling per ZDI advisory), allo...