TM
Product
Trend Micro Apex Central
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 18Low 0
Watch
Add Trend Micro Apex Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-52324 | 8.8 | Jan 23 | An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations Affected: 2019 |
| CVE-2023-32530 | 8.8 | Jun 26 | Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code… Affected: 2019 |
| CVE-2023-32529 | 8.8 | Jun 26 | Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code… Affected: 2019 |
| CVE-2025-69260 | 7.5 | Jan 8 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +10 more |
| CVE-2025-69259 | 7.5 | Jan 8 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +10 more |
| CVE-2025-30679 | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to… Affected: 8.0 before 8.0.6955 |
| CVE-2025-30678 | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to… Affected: 8.0 before 8.0.6955 |
| CVE-2025-47866 | 7.5 | Jun 17 | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations Affected: 8.0 before 8.0.6955 |
| CVE-2023-52325 | 7.5 | Jan 23 | A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations Affected: 2019 |
| CVE-2025-30680 | 7.1 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on… Affected: SaaS before 8.0.6955 |
| CVE-2023-52331 | 7.1 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly Affected: 2019 |
Showing 11