Trendmicro
Trendmicro Apex Central: vulnerabilidades y CVE
Trendmicro Apex Central tiene 35 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 6 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE35
Últimos 12 meses3
Críticas6
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-26871 | Crítica (9.8) | 19% | ⚠ Explotación activa | 29 mar 2022 | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-69260 | Alta (7.5) | 1.6% | — | 8 ene 2026 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in… |
| CVE-2025-69259 | Alta (7.5) | 1.6% | — | 8 ene 2026 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not… |
| CVE-2025-69258 | Crítica (9.8) | 3.6% | — | 8 ene 2026 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the… |
| CVE-2025-30680 | Alta (7.1) | 0.30% | — | 17 jun 2025 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note:… |
| CVE-2025-30679 | Alta (7.5) | 0.36% | — | 17 jun 2025 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected… |
| CVE-2025-30678 | Alta (7.5) | 0.36% | — | 17 jun 2025 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected… |
| CVE-2025-49220 | Crítica (9.8) | 2.1% | — | 17 jun 2025 | An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to… |
| CVE-2025-49219 | Crítica (9.8) | 1.4% | — | 17 jun 2025 | An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to… |
| CVE-2025-47867 | Crítica (9.8) | 1.9% | — | 17 jun 2025 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on… |
| CVE-2025-47866 | Alta (7.5) | 0.30% | — | 17 jun 2025 | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations. |
| CVE-2025-47865 | Crítica (9.8) | 1.8% | — | 17 jun 2025 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations. |
| CVE-2023-52331 | Alta (7.1) | 0.55% | — | 23 ene 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain… |
| CVE-2023-52329 | Media (6.1) | 0.94% | — | 23 ene 2024 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this… |
| CVE-2023-52328 | Media (6.1) | 2.5% | — | 23 ene 2024 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this… |
| CVE-2023-52327 | Media (6.1) | 2.5% | — | 23 ene 2024 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this… |
| CVE-2023-52326 | Media (6.1) | 2.5% | — | 23 ene 2024 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this… |
| CVE-2023-52325 | Alta (7.5) | 4.5% | — | 23 ene 2024 | A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in… |
| CVE-2023-52324 | Alta (8.8) | 4.2% | — | 23 ene 2024 | An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this… |
| CVE-2023-38627 | Media (5.4) | 0.32% | — | 23 ene 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note:… |
| CVE-2023-38626 | Media (5.4) | 0.32% | — | 23 ene 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note:… |
| CVE-2023-38625 | Media (5.4) | 0.32% | — | 23 ene 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note:… |
| CVE-2023-38624 | Media (5.4) | 0.33% | — | 23 ene 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note:… |
| CVE-2023-32605 | Media (5.4) | 0.33% | — | 26 jun 2023 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an… |
| CVE-2023-32604 | Media (5.4) | 0.33% | — | 26 jun 2023 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an… |
| CVE-2023-32537 | Media (5.4) | 0.33% | — | 26 jun 2023 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an… |
| CVE-2023-32536 | Media (5.4) | 0.33% | — | 26 jun 2023 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an… |
| CVE-2023-32535 | Media (6.1) | 1.9% | — | 26 jun 2023 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar… |
| CVE-2023-32534 | Media (6.1) | 0.68% | — | 26 jun 2023 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar… |
| CVE-2023-32533 | Media (6.1) | 1.9% | — | 26 jun 2023 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar… |
| CVE-2023-32532 | Media (6.1) | 1.9% | — | 26 jun 2023 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Trendmicro
Apex ONE · 180Officescan · 71Worry-free Business Security · 58Interscan WEB Security Virtual Appliance · 29Worry-free Business Security Services · 25Control Manager · 22Mobile Security · 21Email Encryption Gateway · 19Serverprotect · 18Internet Security · 17Password Manager · 15Deep Security Agent · 15