trendmicro apex central
productUScpe:2.3:a:trendmicro:apex_central:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
public exploit
by severity
3critical8high18medium0low
updated 2026-10-27
01
vulnerabilities (35)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-26871US | critical9.8OT critical | KEV |
| CVE-2023-52325US | high7.5 | — |
| CVE-2023-52324US | high8.8 | — |
| CVE-2025-69258US | — | — |
| CVE-2023-52328US | medium6.1 | — |
| CVE-2023-52327US | medium6.1 | — |
| CVE-2023-52326US | medium6.1 | — |
| CVE-2023-32530US | high8.8 | — |
| CVE-2023-32529US | high8.8 | — |
| CVE-2025-49220US | — | — |
| CVE-2025-47867US | critical9.8 | — |
| CVE-2023-32535US | medium6.1 | — |
| CVE-2023-32533US | medium6.1 | — |
| CVE-2023-32532US | medium6.1 | — |
| CVE-2023-32531US | medium6.1 | — |
| CVE-2025-47865US | critical9.8 | — |
| CVE-2025-69260US | — | — |
| CVE-2025-69259US | — | — |
| CVE-2025-49219US | — | — |
| CVE-2023-52329US | medium6.1 | — |
| CVE-2023-32534US | medium6.1 | — |
| CVE-2021-25252US | medium5.5 | — |
| CVE-2023-52331US | high7.1 | — |
| CVE-2025-30679US | high7.5 | — |
| CVE-2025-30678US | high7.5 | — |
| CVE-2023-32605US | medium5.4 | — |
| CVE-2023-32604US | medium5.4 | — |
| CVE-2023-32537US | medium5.4 | — |
| CVE-2023-32536US | medium5.4 | — |
| CVE-2023-38624US | medium5.4 | — |
| CVE-2023-38627US | medium5.4 | — |
| CVE-2023-38626US | medium5.4 | — |
| CVE-2023-38625US | medium5.4 | — |
| CVE-2025-47866US | high7.5 | — |
| CVE-2025-30680US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13 CVEs
- CWE-918Server-Side Request Forgery (SSRF)8 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
- CWE-346Origin Validation Error3 CVEs
- CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-475Undefined Behavior for Input to API2 CVEs
- CWE-477Use of Obsolete Function2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE35 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan