Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apexone_saas:14.0.0.14492:ga:*:*:*:*:*:*

part: a version: 14.0.0.14492 update: ga

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductApexone Saas (e7d5bb67-e7c2-56e1-890a-aa5531c63590)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49158 vulnerable 2026-06-08 07:29:12.654163 Details available
MEDIUM (6.7)
An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:56.705Z
Updated: 2025-06-17T19:55:43.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49157 vulnerable 2026-06-08 07:29:12.653498 Details available
HIGH (7.8)
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:49.084Z
Updated: 2025-06-17T20:18:26.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49156 vulnerable 2026-06-08 07:29:12.652883 Details available
HIGH (7)
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:39.613Z
Updated: 2025-06-17T20:21:26.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49155 vulnerable 2026-06-08 07:29:12.652293 Details available
HIGH (8.8)
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
Published: 2025-06-17T18:42:31.517Z
Updated: 2025-06-17T20:22:40.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49154 vulnerable 2026-06-08 07:29:12.644497 Details available
HIGH (8.7)
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2025-06-17T18:42:10.085Z
Updated: 2025-06-17T20:25:33.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.