GCVE - cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*

part: a version: - update: *

Vendor	Trendmicro (`c5410dda-4dad-5329-a26d-d91c43e01834`)
Product	Apex One (`4a397b89-120c-51f4-9f9b-30a93eedae96`)
Edition	*
Language	*
Software edition	*
Target software	saas
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-39753`	vulnerable	2026-06-08 06:41:51.526456	Details available HIGH (7.5) An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Published: 2024-10-22T18:26:22.507Z Updated: 2024-10-22T19:32:17.476Z Open on db.gcve.eu Reference links https://success.trendmicro.com/en-US/solution/ka-0016669 https://www.zerodayinitiative.com/advisories/ZDI-24-897/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36307`	vulnerable	2026-06-08 06:39:44.194370	Details available MEDIUM (4.7) A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Published: 2024-06-10T21:21:32.953Z Updated: 2024-08-02T03:37:04.691Z Open on db.gcve.eu Reference links https://success.trendmicro.com/dcx/s/solution/000298063 https://www.zerodayinitiative.com/advisories/ZDI-24-573/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36305`	vulnerable	2026-06-08 06:39:44.189632	Details available HIGH (7.8) A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Published: 2024-06-10T21:21:14.678Z Updated: 2025-03-14T00:49:38.687Z Open on db.gcve.eu Reference links https://success.trendmicro.com/dcx/s/solution/000298063 https://www.zerodayinitiative.com/advisories/ZDI-24-572/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41749`	vulnerable	2026-06-08 05:48:30.920612	Details available An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Published: 2022-10-10T00:00:00.000Z Updated: 2024-08-03T12:49:43.934Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/000291645 https://www.zerodayinitiative.com/advisories/ZDI-22-1400/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40144`	vulnerable	2026-06-08 05:48:24.039081	Details available A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authentication by falsifying request parameters on affected installations. Published: 2022-09-19T00:00:00.000Z Updated: 2024-08-03T12:14:39.823Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/000291528 https://jvn.jp/en/jp/JVN36454862/index.html https://appweb.trendmicro.com/SupportNews/NewsDetail.aspx?id=4553 https://www.ipa.go.jp/security/ciadr/vul/20220913-jvn.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40143`	vulnerable	2026-06-08 05:48:24.038535	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40142`	vulnerable	2026-06-08 05:48:24.037995	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40141`	vulnerable	2026-06-08 05:48:24.037435	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40140`	vulnerable	2026-06-08 05:48:24.036982	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40139`	vulnerable	2026-06-08 05:48:24.033637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26871`	vulnerable	2026-06-08 05:41:54.375467	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.