Cross-Site Scripting Vulnerability in Trend Micro Apex Central

CVE-2023-32531

Summary

Certain dashboard widgets within Trend Micro Apex Central (on-premise) are susceptible to cross-site scripting (XSS) attacks. This vulnerability allows an attacker to execute malicious scripts in the context of an affected user’s session, potentially leading to unauthorized remote code execution on the server. Organizations utilizing this product should promptly assess their systems to mitigate the security risk and prevent exploitation.

References