Trend Micro Apex Central SQL Injection

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the improper processing of the dbCert parameter in the setcertificatesconfig request sent to the modTMMS endpoint. Exploiting this vulnerability allows an attacker who operates remotely to execute...

PT-2023-23857 · Trend Micro · Trend Micro Mobile Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Mobile Security Enterprise version 9.8 SP5 Description: The issue allows a remote attacker to create arbitrary files on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged...