CVE-2025-30678

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

CVE-2025-30642

CVE-2025-30642 concerns a local DoS in Trend Micro Deep Security Agent 20.0 caused by a link-following issue in the Damage Cleanup Engine. An attacker who can run code with low privileges on the target can trigger a denial of service by creating a junction that leads to file deletion, according t...

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

CVE-2025-30641

CVE-2025-30641 is a local privilege-escalation in Trend Micro Deep Security Deep Security Agent’s Anti-Malware component (20.0). The flaw arises from a link-following issue that can be exploited by a local attacker who already has low-privilege code execution to escalate privileges, potentially v...

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-30640

CVE-2025-30640 is a confirmed local privilege escalation affecting Trend Micro Deep Security 20.0 agents, attributed to a link-following flaw in the Anti-Malware/Deep Security Platform. The root cause involves abusing symbolic links to escalate privileges, with an attacker needing to run low-priv...

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2025-30680

CVE-2025-30680 is an SSRF vulnerability in Trend Micro Apex Central SaaS that could lead to information disclosure by manipulating certain parameters. Affected product is Apex Central SaaS; CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, low attack complexity, low privileges, no user i...

CVE-2025-30680

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...

CVE-2025-30680

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

CVE-2025-30679

Trend Micro Apex Central on‑premise modOSCE component is affected by a Server‑side Request Forgery (SSRF) that can be triggered by manipulating certain parameters to disclose information. The sources consistently describe information disclosure as the impact; no specific exploit details or CVSS a...

CVE-2025-30678

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

CVE-2025-30678

Trend Micro Apex Central (on-premise) modTMSM is affected by CVE-2025-30678, a Server-side Request Forgery (SSRF) that allows an attacker to manipulate certain parameters and cause information disclosure. The issue stems from insufficient validation in the modTMSM component, enabling potential le...

CVE-2025-30678

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...