Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apex_one:*:*:*:*:*:saas:*:*

part: a version: * update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductApex One (4a397b89-120c-51f4-9f9b-30a93eedae96)
Edition*
Language*
Software edition*
Target softwaresaas
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36307 vulnerable 2026-06-08 06:39:44.194535 Details available
MEDIUM (4.7)
A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2024-06-10T21:21:32.953Z
Updated: 2024-08-02T03:37:04.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36304 vulnerable 2026-06-08 06:39:44.187419 Details available
HIGH (7.8)
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2024-06-10T21:21:04.492Z
Updated: 2024-08-02T03:37:04.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36302 vulnerable 2026-06-08 06:39:44.182713 Details available
HIGH (7.8)
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36303.
Published: 2024-06-10T21:20:41.619Z
Updated: 2024-08-02T03:37:05.069Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.