Trend Micro Apex One as a Service

Name: Trend Micro Apex One as a Service
Brand: Trend Micro

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical23high5medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34926US	—OT critical	13.4% (96th)	KEV	no fix	2026-05-21	≤ 14.0.20731
CVE-2023-41179US	high7.2OT critical	4.22% (91st)	KEV	no fix	2023-09-19	≤ 14.0.12637
CVE-2023-32557US	critical9.8	1.22% (69th)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2025-49155US	—	0.92% (60th)	—	no fix	2025-06-17	≤ 14.0.14492
CVE-2024-36305US	high7.8	0.89% (59th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2024-36307US	medium5.5	0.78% (56th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2022-45797US	high7.1	0.67% (52nd)	—	no fix	2022-12-12	≤ Hotfix Build 202211 Agent 14.0.11840
CVE-2024-37289US	high7.8	0.63% (50th)	—	no fix	2024-06-10	≤ Hotfix - Build 202405
CVE-2023-32552US	medium5.3	0.63% (50th)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2024-36306US	medium5.5	0.61% (49th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2024-36302US	high7.8OT elevated	0.55% (46th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2023-32553US	medium5.3	0.49% (42nd)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2024-36304US	high7.0	0.40% (34th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2023-25148US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ Hotfix - Build 202301
CVE-2023-25146US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ Hotfix - Build 202301
CVE-2023-25145US	high7.8	0.39% (33rd)	—	no fix	2023-03-10	≤ Hotfix - Build 202301
CVE-2024-36303US	high7.8OT elevated	0.35% (29th)	—	no fix	2024-06-10	≤ 14.0.13139
CVE-2023-34145US	high7.8	0.31% (23rd)	—	no fix	2023-06-26	≤ Hotfix - Build 202305 (Apex One as a Service)
CVE-2023-34144US	high7.8	0.31% (23rd)	—	no fix	2023-06-26	≤ Hotfix - Build 202305 (Apex One as a Service)
CVE-2023-25144US	high7.8	0.30% (23rd)	—	no fix	2023-03-10	≤ Hotfix - Build 202301
CVE-2023-32556US	medium5.5	0.29% (21st)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2023-47192US	high7.8	0.24% (15th)	—	no fix	2024-01-23	≤ SaaS
CVE-2023-34148US	high7.8OT elevated	0.23% (14th)	—	no fix	2023-06-26	≤ Hotfix - Build 202305 (Apex One as a Service)
CVE-2023-34147US	high7.8OT elevated	0.23% (14th)	—	no fix	2023-06-26	≤ Hotfix - Build 202305 (Apex One as a Service)
CVE-2023-34146US	high7.8OT elevated	0.23% (14th)	—	no fix	2023-06-26	≤ Hotfix - Build 202305 (Apex One as a Service)
CVE-2025-49157US	—	0.19% (9th)	—	no fix	2025-06-17	≤ 14.0.14492
CVE-2023-32555US	high7.0	0.18% (8th)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2023-32554US	high7.0	0.18% (8th)	—	no fix	2023-06-26	≤ 14.0.12105
CVE-2025-49158US	high7.8	0.17% (6th)	—	no fix	2025-06-17	≤ 14.0.14492
CVE-2024-58105US	high7.8	0.16% (5th)	—	no fix	2025-03-25	≤ 14.0.14203
CVE-2024-58104US	high7.8	0.16% (5th)	—	no fix	2025-03-25	≤ 14.0.14203
CVE-2025-49156US	high7.8	0.15% (4th)	—	no fix	2025-06-17	≤ 14.0.14492

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-59Improper Link Resolution Before File Access ('Link Following')10 CVEs
CWE-269Improper Privilege Management7 CVEs
CWE-284Improper Access Control4 CVEs
CWE-346Origin Validation Error3 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition3 CVEs
CWE-426Untrusted Search Path3 CVEs
CWE-749Exposed Dangerous Method or Function3 CVEs
CWE-863Incorrect Authorization3 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan