DeutschShown in its original language — a full translation is planned for a future version.
Trend Micro Apex One und Apex Central: Mehrere Schwachstellen
view advisory published 2024-01-09
Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex One und Trend Micro Apex Central ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-52331US | high7.1 | — | ||
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly.
P… | ||||
| CVE-2023-52330US | medium6.1 | — | ||
A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central.
P… | ||||
| CVE-2023-52329US | medium6.1 | — | ||
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… | ||||
| CVE-2023-52328US | medium6.1 | — | ||
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… | ||||
| CVE-2023-52327US | medium6.1 | — | ||
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… | ||||
| CVE-2023-52326US | medium6.1 | — | ||
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… | ||||
| CVE-2023-52325US | high7.5 | — | ||
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations.
Please note:… | ||||
| CVE-2023-52324US | high8.8 | — | ||
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations.
Please note: although au… | ||||
| CVE-2023-52094US | high7.8 | — | ||
An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privi… | ||||
| CVE-2023-52093US | high7.8 | — | ||
An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations.
Please note: an atta… | ||||
| CVE-2023-52092US | high7.8 | — | ||
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker mus… | ||||
| CVE-2023-52091US | high7.8 | — | ||
An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attack… | ||||
| CVE-2023-52090US | high7.8 | — | ||
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker mus… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan