TrendMicro Apex Central

Trend Micro Apex Central SaaS SSRF -> Info Disclosure
CVE-2025-30680 - June 17, 2025

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.

Trend Micro Apex Central Widget v<8.0.6955 Unrestricted File Upload
CVE-2025-47866 - June 17, 2025

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

LFI in Trend Micro Apex Central <8.0.6955 RCE
CVE-2025-47867 - June 17, 2025

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.

Insecure deserialization TMC Apex Central <8.0.7007 enables pre-auth RCE
CVE-2025-49219 - June 17, 2025

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

Trend Micro Apex Central <8.0.7007 insecure deserialization RCE
CVE-2025-49220 - June 17, 2025

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method.

Trend Micro Apex Central XSS in dashboard widgets allows remote code exec
CVE-2023-52327 6.1 - Medium - January 23, 2024

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328.

XSS

Apex Central XSS Enables Remote Code Execution (CVE-2023-52330)
CVE-2023-52330 6.1 - Medium - January 23, 2024

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

XSS

Trend Micro Apex Central SSRF Vulnerability
CVE-2023-52331 7.1 - High - January 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

SSRF

Trend Micro Apex Central Unrestricted File Upload (CVE-2023-52324)
CVE-2023-52324 8.8 - High - January 23, 2024

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials. Also, this vulnerability could be potentially used in combination with another vulnerability to execute arbitrary code.

Unrestricted File Upload

Trend Micro Apex Central LFI in Widget Enables RCE
CVE-2023-52325 7.5 - High - January 23, 2024

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.

Trend Micro Apex Central SSRF (CVE-2023-38624)
CVE-2023-38624 5.4 - Medium - January 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-38625 through CVE-2023-38627.

SSRF

Trend Micro Apex Central SSRF via post-auth attack
CVE-2023-38625 5.4 - Medium - January 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-38624.

SSRF

Trend Micro Apex Central SSRF (pre-build 6481) Vulnerability
CVE-2023-38626 5.4 - Medium - January 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-38625.

SSRF

SSRF Vulnerability in Trend Micro Apex Central 2019 <6481
CVE-2023-38627 5.4 - Medium - January 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-38626.

SSRF

Trend Micro Apex Central XSS in Dashboard Widgets Enables RCE
CVE-2023-52326 6.1 - Medium - January 23, 2024

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327.

XSS

Trend Micro Apex Central XSS in dashboard widgets
CVE-2023-52328 6.1 - Medium - January 23, 2024

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329.

XSS

XSS in Trend Micro Apex Central Dashboard Widgets
CVE-2023-52329 6.1 - Medium - January 23, 2024

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326.

XSS

Trend Micro Apex Central SQLi RCE in On-Prem Modules
CVE-2023-32529 8.8 - High - June 26, 2023

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32530.

SQL Injection

Trend Micro Apex Central Authenticated Reflected XSS (CVE-2023-32604)
CVE-2023-32604 5.4 - Medium - June 26, 2023

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32605.

XSS

Trend Micro Apex Central Authenticated Reflected XSS Vulnerability
CVE-2023-32605 5.4 - Medium - June 26, 2023

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32604.

XSS

Trend Micro Apex Central onprem SQLi enabling RCE for authenticated users
CVE-2023-32530 8.8 - High - June 26, 2023

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32529.

SQL Injection

CVE-2023-32531: Trend Micro Apex Central XSS Enables RCE
CVE-2023-32531 6.1 - Medium - June 26, 2023

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32532 through 32535.

XSS

XSS in Trend Micro Apex Central dashboard widgets leading to RCE
CVE-2023-32532 6.1 - Medium - June 26, 2023

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.

XSS

Trend Micro Apex Central XSS in Dashboard Widgets
CVE-2023-32533 6.1 - Medium - June 26, 2023

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.

XSS

Trend Micro Apex Central: XSS in Dashboard Widgets Enables RCE
CVE-2023-32534 6.1 - Medium - June 26, 2023

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.

XSS

Trend Micro Apex Central XSS in Dashboard Widgets (CVE-2023-32535)
CVE-2023-32535 6.1 - Medium - June 26, 2023

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32534.

XSS

Trend Micro Apex Central Authenticated Reflected XSS (CVE-2023-32536)
CVE-2023-32536 5.4 - Medium - June 26, 2023

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32537.

XSS

Trend Micro Apex Central Authenticated Reflected XSS (CVE-2023-32537)
CVE-2023-32537 5.4 - Medium - June 26, 2023

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32536.

XSS

An arbitrary file upload vulnerability in Trend Micro Apex Central could
CVE-2022-26871 9.8 - Critical - March 29, 2022

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

Insufficient Verification of Data Authenticity