Authenticated Reflected Cross-Site Scripting Vulnerability in Trend Micro Apex Central

CVE-2023-32537

What is CVE-2023-32537?

The vulnerability in Trend Micro Apex Central (on-premise) could allow an attacker to execute authenticated reflected cross-site scripting (XSS) attacks. This arises from insufficient validation and sanitization of user inputs. An attacker must first gain authenticated access to exploit this vulnerability, posing risks to user security and system integrity. Organizations relying on Apex Central are encouraged to apply any necessary security patches and implement workflow modifications to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References