CVE-2023-52330

published 2024-01-23

CVE-2023-52330: A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend…

Priority P4 29 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central.

Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
trend_micro_inc	trend_micro_apex_central	>= 2019 < 8.0.0.6570	8.0.0.6570
trendmicro	apex_one	< 14.0.12849	14.0.12849
trendmicro	apex_one	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79