Reflected Cross-Site Scripting Vulnerability in Trend Micro Apex Central

CVE-2023-32604

Summary

Trend Micro Apex Central (on-premise) exhibits vulnerabilities due to improper validation and sanitization of user input, which may lead to reflected cross-site scripting (XSS) attacks. Successful exploitation requires that an attacker gains authentication to the affected system. This weakness allows attackers to execute malicious scripts in users' browsers, potentially compromising sensitive information and affecting overall security. Users of affected versions should implement necessary security measures and update to the latest version to mitigate risks.

References