Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apex_central:6955:*:*:en:*:windows_10:x86_64:1809

part: a version: 6955 update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductApex Central (96b0dafa-f18c-5827-816e-96629a7342ab)
Edition*
Languageen
Software edition*
Target softwarewindows_10
Target hardwarex86_64
Other1809
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47867 vulnerable 2026-06-08 07:27:14.952404 Details available
HIGH (7.5)
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
Published: 2025-06-17T17:42:55.846Z
Updated: 2026-02-26T17:50:32.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47866 vulnerable 2026-06-08 07:27:14.951496 Details available
MEDIUM (4.3)
An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.
Published: 2025-06-17T17:42:42.396Z
Updated: 2025-06-17T18:36:07.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47865 vulnerable 2026-06-08 07:27:14.942992 Details available
HIGH (7.5)
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.
Published: 2025-06-17T17:42:30.922Z
Updated: 2026-02-26T17:50:32.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30679 vulnerable 2026-06-08 07:17:01.503359 Details available
MEDIUM (6.5)
A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.
Published: 2025-06-17T19:56:11.050Z
Updated: 2025-06-20T13:12:51.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30678 vulnerable 2026-06-08 07:17:01.489445 Details available
MEDIUM (6.5)
A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.
Published: 2025-06-17T19:56:01.476Z
Updated: 2025-06-20T13:12:57.801Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.