Description
A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-24-051/
Scores
CVSS v3
6.1
EPSS
0.0078
EPSS Percentile
73.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (2)
trendmicro/apex_one
2019
trendmicro/apex_one
< 14.0.12849
Published
Jan 23, 2024
Tracked Since
Feb 18, 2026