Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

35 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-32536	Modificada	Media (5.4)	0.33%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this…
CVE-2023-32535	Modificada	Media (6.1)	1.9%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32534.
CVE-2023-32534	Modificada	Media (6.1)	0.68%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.
CVE-2023-32533	Modificada	Media (6.1)	1.9%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.
CVE-2023-32532	Modificada	Media (6.1)	1.9%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.
CVE-2023-32531	Modificada	Media (6.1)	1.9%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32532 through 32535.
CVE-2023-32530	Modificada	Alta (8.8)	2.4%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This…
CVE-2023-32529	Modificada	Alta (8.8)	2.2%	—	Trendmicro Apex Central	26/6/2023	17/6/2026	Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This…
CVE-2022-26871	Analizada	Crítica (9.8)	19%	⚠ Explotación activa	Trendmicro Apex Central Trendmicro Apex ONE	29/3/2022	17/6/2026	An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
CVE-2021-25252	Modificada	Media (5.5)	0.62%	—	Trendmicro Apex Central Trendmicro Apex ONE Trendmicro Cloud Edge Trendmicro Deep Security+15	3/3/2021	17/6/2026	Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.