Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. A security vulnerability exists in Trend Micro Apex Central that stems from a cross-site scripting vulnerability. It could allow a remote attacker to execute arbitrary code on an affected installation...

CVE-2023-52326: Improper Neutralization of Input During Web Page Generation

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

CVE-2023-52329: Improper Neutralization of Input During Web Page Generation

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. An attacker exploits the vulnerability to interact directly with internal or local services...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

CVE-2023-52325: Improper Control of Filename for Include/Require Statement in PHP Program

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52330: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2023-38625: Server-Side Request Forgery (SSRF)

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-38624: Server-Side Request Forgery (SSRF)

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-52331: Server-Side Request Forgery (SSRF)

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2023-52328: Improper Neutralization of Input During Web Page Generation

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...

CVE-2023-38626: Server-Side Request Forgery (SSRF)

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-52324: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2023-38627: Server-Side Request Forgery (SSRF)

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. A security vulnerability exists in Trend Micro Apex Central that stems from a cross-site scripting XSS vulnerability in certain dashboard widgets. An attacker could exploit the vulnerability to execute remote code on an affected...

Trend Micro Apex Central Security Vulnerability

Trend Micro Apex Central is a web-based console from Trend Micro. Trend Micro Apex Central 2019 has a security vulnerability that stems from an authenticated server-side request forgery SSRF vulnerability. It may allow an attacker to interact directly with internal or local services...

CVE-2023-52327: Improper Neutralization of Input During Web Page Generation

Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...

Trend Micro Apex Central security vulnerabilities

Trend Micro Apex Central is a Web-based product console from Trend Micro. A cross-site scripting vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to inject malicious script or HTML code...

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

Several public and popular libraries abandoned but still used in Java and Android applications have been found susceptible to a new software supply chain attack method called MavenGate. "Access to projects can be hijacked through domain name purchases and since most default build configurations a...