Lucene search
+L

11 matches found

OSV
OSV
•added 2025/06/17 8:15 p.m.•17 views

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

7.5CVSS5.8AI score0.00363EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/17 8:15 p.m.•16 views

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

7.5CVSS0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/17 7:56 p.m.•27 views

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

6.5CVSS0.00363EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•13 views

Trend Micro Apex Central 代码问题漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central that stems from the vulnerability of the modOSCE component to a server-side request forgery attack, which could lead to information disclosure...

7.5CVSS6.2AI score0.00363EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•1 views

CVE-2025-30679: Server-Side Request Forgery (SSRF)

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

7.5CVSS5.8AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/04/09 12:00 a.m.•14 views

Trend Micro Apex Central modOSCE Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

6.5CVSS5.9AI score0.00363EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/04 12:00 a.m.•17 views

The vulnerability of the modOSCE component of the Trend Micro Apex Central security monitoring and management tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the modOSCE component of the Trend Micro Apex Central security monitoring and management tool is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

7.8CVSS6.5AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
•added 2024/10/22 7:15 p.m.•17 views

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.5CVSS6.3AI score0.02003EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/22 7:15 p.m.•21 views

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.5CVSS0.02003EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/22 6:26 p.m.•34 views

CVE-2024-39753

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.5CVSS0.02003EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/22 12:00 a.m.•3 views

CVE-2024-39753: Improper Neutralization of Special Elements used in an SQL Command

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.5CVSS7.8AI score0.02003EPSS
SaveExploits0References1
Rows per page
Query Builder