CVE-2023-52330 — Cross-site Scripting in Micro INC Trend Micro Apex Central

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.8%
top 26.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro INC Trend Micro Apex CentralTrendmicro Apex ONE
Timeline
PublishedJan 23

Description

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5trend_micro_inc/trend_micro_apex_central2019 — 8.0.0.6570
▶NVDtrendmicro/apex_one< 14.0.12849+1

🔴Vulnerability Details

2
GHSA
GHSA-gvjg-pwqj-xrpj: A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of↗2024-01-23
▶
CVEList
CVE-2023-52330: A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of↗2024-01-23
▶
CVE-2023-52330 — Cross-site Scripting | cvebase