Trend Micro Apex One
Approved changes feed: RSS · Atom
cpe:2.3:a:trendmicro:apex_one:-:-:*:*:*:*:*:*
part: a version: - update: -
| Vendor | Trendmicro (c5410dda-4dad-5329-a26d-d91c43e01834) |
|---|---|
| Product | Apex One (4a397b89-120c-51f4-9f9b-30a93eedae96) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-36305 |
vulnerable | 2026-06-08 06:39:44.190689 |
Details available
HIGH (7.8)
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2024-06-10T21:21:14.678Z
Updated: 2025-03-14T00:49:38.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0587 |
vulnerable | 2026-06-08 05:52:31.976328 |
Details available
A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory (i.e., \PCCSRV\TEMP\SampleSubmission) on the server. The attacker can upload a large number of large files to fill up the file system on which the Apex One server is installed.
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T14:38:28.356Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25252 |
vulnerable | 2026-06-08 05:30:40.533840 |
Details available
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
Published: 2021-03-03T15:43:40.000Z
Updated: 2024-08-03T19:56:11.072Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.