Trend Micro Apex One

Name: Trend Micro Apex One
Brand: Trend Micro

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical40high12medium0low

updated 2026-10-27

vulnerabilities (83)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34926US	—OT critical	13.4% (96th)	KEV	SP1 CP Build 18012	2026-05-21	3 versions
CVE-2025-54948US	critical9.8OT critical	25.4% (98th)	KEV	SP1 CP B14081	2025-08-05	6 versions
CVE-2020-8467US	high8.8OT critical	10.9% (96th)	KEV	no fix	2020-03-18	≤ 2019
CVE-2020-8468US	high8.8OT critical	6.17% (93rd)	KEV	no fix	2020-03-18	≤ 2019
CVE-2021-36741US	high8.8OT critical	4.95% (92nd)	KEV	no fix	2021-07-29	≤ On Premise (2019)
CVE-2023-41179US	high7.2OT critical	4.22% (91st)	KEV	no fix	2023-09-19	≤ SP1 Patch 1 (B12380)
CVE-2022-40139US	high7.2OT critical	3.44% (89th)	KEV	no fix	2022-09-19	2 versions
CVE-2020-24557US	high7.8OT critical	2.67% (86th)	KEV	no fix	2020-09-01	2 versions
CVE-2021-36742US	high7.8OT critical	1.48% (74th)	KEV	no fix	2021-07-29	≤ On Premise (2019)
CVE-2021-25253US	high7.8	1.91% (80th)	Exploit	no fix	2021-04-13	2 versions
CVE-2023-0587US	critical9.1	59.6% (99th)	—	no fix	2023-02-01	≤ 2019 (On-prem) Server Build 11110
CVE-2025-54987US	critical9.8	21.5% (98th)	—	SP1 CP B14081	2025-08-05	6 versions
CVE-2021-32465US	high8.8	4.34% (91st)	—	no fix	2021-08-04	2 versions
CVE-2025-71210US	—	3.81% (90th)	—	CP Build 14136	2026-05-21	4 versions
CVE-2025-71211US	—	3.75% (90th)	—	14.0.20315	2026-05-21	4 versions
CVE-2020-28583US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28582US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28577US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28576US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2020-28573US	medium5.3	3.25% (88th)	—	no fix	2020-12-01	≤ 2019
CVE-2025-49220US	—	2.06% (81st)	—	no fix	2025-06-17	2 versions
CVE-2022-40144US	critical9.8	1.93% (80th)	—	no fix	2022-09-19	2 versions
CVE-2025-49219US	—	1.42% (73rd)	—	no fix	2025-06-17	2 versions
CVE-2023-32557US	critical9.8	1.22% (69th)	—	no fix	2023-06-26	≤ 2019 (On-prem)
CVE-2024-52047US	high8.8	1.10% (66th)	—	y SP1 CP b12980	2024-12-31	< y SP1 CP b12980
CVE-2025-49155US	—	0.92% (60th)	—	SP1 CP Build 14002	2025-06-17	5 versions
CVE-2024-36305US	high7.8	0.89% (59th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2020-24556US	high7.8	0.78% (56th)	—	no fix	2020-09-01	2 versions
CVE-2024-36307US	medium5.5	0.78% (56th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2022-45797US	high7.1	0.67% (52nd)	—	no fix	2022-12-12	≤ SP1 CP b11136
CVE-2024-37289US	high7.8	0.63% (50th)	—	no fix	2024-06-10	≤ SP1 CP b12980
CVE-2023-32552US	medium5.3	0.63% (50th)	—	no fix	2023-06-26	≤ SP1 Critical Patch Build 12024
CVE-2024-36306US	medium5.5	0.61% (49th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2024-36302US	high7.8OT elevated	0.55% (46th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2025-71212US	—	0.54% (45th)	—	14.0.20315	2026-05-21	4 versions
CVE-2021-28645US	high7.8	0.51% (43rd)	—	no fix	2021-04-13	2 versions
CVE-2021-25250US	high7.8	0.51% (43rd)	—	no fix	2021-04-13	2 versions
CVE-2023-32553US	medium5.3	0.49% (42nd)	—	no fix	2023-06-26	≤ SP1 Critical Patch Build 12024
CVE-2022-24680US	high7.8	0.48% (41st)	—	no fix	2022-02-24	2 versions
CVE-2022-24679US	high7.8	0.48% (41st)	—	no fix	2022-02-24	2 versions
CVE-2024-52050US	—	0.48% (41st)	—	SP1 build 13140	2024-12-31	2 versions
CVE-2021-28646US	medium5.5	0.42% (36th)	—	no fix	2021-04-13	2 versions
CVE-2024-36304US	high7.0	0.40% (34th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2023-25148US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ On Premise (2019)
CVE-2023-25146US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ On Premise (2019)
CVE-2023-25145US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ On Premise (2019)
CVE-2025-71214US	—	0.36% (29th)	—	CP Build 14136	2026-05-21	4 versions
CVE-2024-36303US	high7.8OT elevated	0.35% (29th)	—	no fix	2024-06-10	≤ 2019 (On-prem)
CVE-2025-71213US	—	0.34% (27th)	—	14.0.20315	2026-05-21	4 versions
CVE-2022-40143US	high7.3	0.33% (26th)	—	no fix	2022-09-19	2 versions

showing 50 of 83

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-59Improper Link Resolution Before File Access ('Link Following')17 CVEs
CWE-269Improper Privilege Management14 CVEs
CWE-346Origin Validation Error13 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-284Improper Access Control6 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource4 CVEs

sources (3)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)73 CVEs
DECERT-Bund (BSI CSAF)32 CVEs
NLNCSC-NL (CSAF)9 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan