Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:on-premises:windows:*:*

part: a version: 2019 update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductApex One (4a397b89-120c-51f4-9f9b-30a93eedae96)
Edition*
Language*
Software editionon-premises
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54987 vulnerable 2026-06-08 07:33:13.926804 Details available
CRITICAL (9.4)
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.
Published: 2025-08-05T13:00:38.698Z
Updated: 2026-02-26T17:49:58.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54948 vulnerable 2026-06-08 07:33:13.824836 Details available
CRITICAL (9.4)
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
Published: 2025-08-05T13:00:19.905Z
Updated: 2025-10-21T22:45:21.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52047 vulnerable 2026-06-08 06:52:14.628294 Details available
HIGH (7.5)
A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2024-12-31T16:09:28.937Z
Updated: 2025-01-02T19:23:08.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39753 vulnerable 2026-06-08 06:41:51.529265 Details available
HIGH (7.5)
An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2024-10-22T18:26:22.507Z
Updated: 2024-10-22T19:32:17.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47199 vulnerable 2026-06-08 06:14:24.234719 Details available
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47193.
Published: 2024-01-23T20:38:09.676Z
Updated: 2025-05-30T14:18:38.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47198 vulnerable 2026-06-08 06:14:24.231613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47197 vulnerable 2026-06-08 06:14:24.230638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47196 vulnerable 2026-06-08 06:14:24.229971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47195 vulnerable 2026-06-08 06:14:24.228950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47194 vulnerable 2026-06-08 06:14:24.228289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47193 vulnerable 2026-06-08 06:14:24.227574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47192 vulnerable 2026-06-08 06:14:24.226796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.