Cross-Site Scripting Vulnerability in Trend Micro Apex Central

CVE-2023-32532

What is CVE-2023-32532?

Certain dashboard widgets within the on-premise version of Trend Micro Apex Central are susceptible to cross-site scripting (XSS) attacks. An attacker exploiting this vulnerability can execute arbitrary scripts in the context of the user's session, potentially leading to unauthorized actions, data leakage, or remote code execution on compromised servers. Immediate remediation is advised to protect against these security risks.

References