Cross-Site Scripting Vulnerability in Trend Micro Apex One
CVE-2019-19692

6.1MEDIUM

Key Information:

Vendor
Trend Micro
Status
Trend Micro Apex Central
Vendor
CVE Published:
20 December 2019

Summary

Trend Micro Apex One (2019) is vulnerable to a cross-site scripting (XSS) attack through its product console. This issue allows attackers to inject malicious scripts into web pages viewed by users. It is important to note that the Japanese version of this product is not susceptible to this vulnerability. Users are encouraged to apply recommended updates and monitor for any suspicious activity to safeguard their systems.

Affected Version(s)

Trend Micro Apex Central 2019

References

https://success.trendmicro.com/solution/000159569
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.