AC
Product
Apex Central
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 18Low 0
Watch
Add Apex Central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26871 In wildKEV | 9.8 | Mar 29 | Trend Micro Apex Central Arbitrary File Upload Vulnerability Affected: 2019 |
| CVE-2025-69258 | 9.8 | Jan 8 | A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to… Affected: 2019; 2019; 2019; 2019; 2019; 2019; +10 more |
| CVE-2025-49220 | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +7 more |
| CVE-2025-49219 | 9.8 | Jun 17 | An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +7 more |
| CVE-2025-47867 | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and… Affected: 2019; 2019; 2019; 2019; 2019; 2019; +6 more |
| CVE-2025-47865 | 9.8 | Jun 17 | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +6 more |
| CVE-2023-52324 | 8.8 | Jan 23 | An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations Affected: 2019 |
| CVE-2023-32530 | 8.8 | Jun 26 | Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code… Affected: 2019 |
| CVE-2023-32529 | 8.8 | Jun 26 | Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code… Affected: 2019 |
| CVE-2025-69260 | 7.5 | Jan 8 | A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +10 more |
| CVE-2025-69259 | 7.5 | Jan 8 | A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +10 more |
| CVE-2025-30679 | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to… Affected: 2019; 2019; 2019; 2019; 2019; 2019; +6 more |
| CVE-2025-30678 | 7.5 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to… Affected: 2019; 2019; 2019; 2019; 2019; 2019; +6 more |
| CVE-2025-47866 | 7.5 | Jun 17 | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations Affected: 2019; 2019; 2019; 2019; 2019; 2019; +6 more |
| CVE-2023-52325 | 7.5 | Jan 23 | A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations Affected: 2019 |
| CVE-2025-30680 | 7.1 | Jun 17 | A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on… Affected: before 2025-03-01 |
| CVE-2023-52331 | 7.1 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly Affected: 2019 |
| CVE-2023-52329 | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-52328 | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-52327 | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-52326 | 6.1 | Jan 23 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-32535 | 6.1 | Jun 26 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-32534 | 6.1 | Jun 26 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-32533 | 6.1 | Jun 26 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-32532 | 6.1 | Jun 26 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2023-32531 | 6.1 | Jun 26 | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution… Affected: 2019 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 2019 |
| CVE-2023-38627 | 5.4 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or… Affected: 2019 |
| CVE-2023-38626 | 5.4 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or… Affected: 2019 |
| CVE-2023-38625 | 5.4 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or… Affected: 2019 |
| CVE-2023-38624 | 5.4 | Jan 23 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or… Affected: 2019 |
| CVE-2023-32605 | 5.4 | Jun 26 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and… Affected: 2019 |
| CVE-2023-32604 | 5.4 | Jun 26 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and… Affected: 2019 |
| CVE-2023-32537 | 5.4 | Jun 26 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and… Affected: 2019 |
| CVE-2023-32536 | 5.4 | Jun 26 | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and… Affected: 2019 |
Showing 35