CVE-2023-52328
- EPSS 0.58%
- Published 23.01.2024 21:15:09
- Last modified 30.05.2025 15:15:27
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but...
CVE-2023-52327
- EPSS 0.58%
- Published 23.01.2024 21:15:09
- Last modified 10.06.2025 16:15:34
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but...
CVE-2023-52326
- EPSS 0.58%
- Published 23.01.2024 21:15:09
- Last modified 20.06.2025 19:15:27
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but...
CVE-2023-52325
- EPSS 3.11%
- Published 23.01.2024 21:15:09
- Last modified 11.06.2025 17:15:37
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to ex...
CVE-2023-52324
- EPSS 3.86%
- Published 23.01.2024 21:15:09
- Last modified 30.05.2025 15:15:27
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerabi...
CVE-2023-38627
- EPSS 0.15%
- Published 23.01.2024 21:15:08
- Last modified 20.06.2025 19:15:22
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain...
CVE-2023-38626
- EPSS 0.15%
- Published 23.01.2024 21:15:08
- Last modified 20.06.2025 19:15:22
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain...
CVE-2023-38625
- EPSS 0.15%
- Published 23.01.2024 21:15:08
- Last modified 20.06.2025 19:15:21
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain...
CVE-2023-38624
- EPSS 0.15%
- Published 23.01.2024 21:15:08
- Last modified 20.06.2025 19:15:21
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain...
CVE-2023-32605
- EPSS 0.39%
- Published 26.06.2023 22:15:11
- Last modified 21.11.2024 08:03:41
Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authen...