7528 matches found
CVE-2025-30679
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...
CVE-2025-30679
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...
CVE-2025-30680
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...
CVE-2025-30678
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...
CVE-2025-30678
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...
CVE-2025-30642
CVE-2025-30642 concerns a local DoS in Trend Micro Deep Security Agent 20.0 caused by a link-following issue in the Damage Cleanup Engine. An attacker who can run code with low privileges on the target can trigger a denial of service by creating a junction that leads to file deletion, according t...
CVE-2025-30642
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...
CVE-2025-30642
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...
CVE-2025-30641
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...
CVE-2025-30641
CVE-2025-30641 is a local privilege-escalation in Trend Micro Deep Security Deep Security Agent’s Anti-Malware component (20.0). The flaw arises from a link-following issue that can be exploited by a local attacker who already has low-privilege code execution to escalate privileges, potentially v...
CVE-2025-30641
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...
CVE-2025-30640
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2025-30640
CVE-2025-30640 is a confirmed local privilege escalation affecting Trend Micro Deep Security 20.0 agents, attributed to a link-following flaw in the Anti-Malware/Deep Security Platform. The root cause involves abusing symbolic links to escalate privileges, with an attacker needing to run low-priv...
CVE-2025-30640
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2025-30680
CVE-2025-30680 is an SSRF vulnerability in Trend Micro Apex Central SaaS that could lead to information disclosure by manipulating certain parameters. Affected product is Apex Central SaaS; CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, low attack complexity, low privileges, no user i...
CVE-2025-30680
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...
CVE-2025-30680
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central SaaS could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that...
CVE-2025-30679
Trend Micro Apex Central on‑premise modOSCE component is affected by a Server‑side Request Forgery (SSRF) that can be triggered by manipulating certain parameters to disclose information. The sources consistently describe information disclosure as the impact; no specific exploit details or CVSS a...
CVE-2025-30679
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...
CVE-2025-30679
A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...