CVE-2025-49155

published 2025-06-17

CVE-2025-49155: An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to…

Priority P3 51 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
trend_micro_inc	trend_micro_apex_one	>= 2019 (14.0) < 14.0.0.14002	14.0.0.14002
trend_micro_inc	trend_micro_apex_one_as_a_service	>= SaaS < 14.0.14492	14.0.14492
trendmicro	apex_one	< 14.0.14492	14.0.14492
trendmicro	apex_one	>= 14.0.0.12994 < 14.0.0.14002	14.0.0.14002

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427