Authenticated Reflected XSS Vulnerability in Trend Micro Apex Central

CVE-2023-32605

Summary

Trend Micro Apex Central (on-premise) is susceptible to authenticated reflected cross-site scripting (XSS) attacks due to insufficient user input validation and sanitization. An attacker who has successfully authenticated to Apex Central can exploit this vulnerability to execute malicious scripts in the context of the user's session. This could lead to unauthorized actions being performed on behalf of the user or the theft of sensitive information. Organizations using affected versions are advised to implement necessary updates and security measures to mitigate potential risks.

References