Trend Micro Apex Central vulnerabilities

2 known vulnerabilities affecting trend_micro/trend_micro_apex_central.

Total CVEs

2

CISA KEV

1

actively exploited

Public exploits

0

Exploited in wild

1

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-26871CRITICALCVSS 9.8KEVv2019 (on-premise), SaaS2022-03-29

CVE-2022-26871 [CRITICAL] CWE-345 CVE-2022-26871: An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated re An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

CVE-2019-19692MEDIUMCVSS 6.1v20192019-12-20

CVE-2019-19692 [MEDIUM] CWE-79 CVE-2019-19692: Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected.