CVE-2023-52327

Technical details for CVE-2023-52327 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

CVE-2023-52326

CVE-2023-52326 affects Trend Micro Apex Central (on-premise) dashboard widgets and is described as a cross-site scripting (XSS) vulnerability that may allow an attacker to achieve remote code execution on affected servers. Connected sources confirm the issue relates to on-premise components in th...

CVE-2023-52326

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52325

Trend Micro Apex Central is affected by a widget local file inclusion vulnerability that can lead to remote code execution . The underlying issue is inadequate validation of user-supplied data before it is used in a PHP include, specifically in the getObjWGFServiceApiByApiName function. Exploitat...

CVE-2023-52324

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2023-52324

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2023-52324

CVE-2023-52324 affects Trend Micro Apex Central and describes an unrestricted file upload vulnerability that enables a remote attacker to create arbitrary files on affected installations. The core issue involves improper validation during file uploads (notably ZIP handling per ZDI advisory), allo...

CVE-2023-38627

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38627

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38627

Trend Micro Apex Central 2019 (builds lower than 6481) is affected by a post-authenticated SSRF. An attacker who can run low-privilege code can interact with internal or local services directly. The description notes no requirement for user interaction, and CVSS data rates this as Medium with lim...

CVE-2023-38626

CVE-2023-38626 (Trend Micro Apex Central 2019, build

CVE-2023-38626

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38625

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38625

CVE-2023-38625 represents a post-authenticated SSRF in Trend Micro Apex Central 2019 (builds older than 6481). The vulnerability allows an attacker who has gained low-privilege code execution to interact with internal or local services directly. The files/endpoint or component implicated are not ...

CVE-2023-38625

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624

CVE-2023-38624 describes a post-authenticated SSRF in Trend Micro Apex Central 2019 (builds lower than 6481). The vulnerability allows an attacker who can execute low-privilege code to interact with internal or local services directly. The description notes this is similar to CVE-2023-38625 throu...