Authenticated Reflected Cross-Site Scripting Vulnerability in Trend Micro Apex Central

CVE-2023-32537

Summary

The vulnerability in Trend Micro Apex Central (on-premise) could allow an attacker to execute authenticated reflected cross-site scripting (XSS) attacks. This arises from insufficient validation and sanitization of user inputs. An attacker must first gain authenticated access to exploit this vulnerability, posing risks to user security and system integrity. Organizations relying on Apex Central are encouraged to apply any necessary security patches and implement workflow modifications to mitigate potential risks.

References