Authenticated Reflected XSS Vulnerability in Trend Micro Apex Central
CVE-2023-32605

5.4MEDIUM

Key Information:

Vendor

Trend Micro
Status
Trend Micro Apex Central
Vendor
CVE Published:
26 June 2023

Badges

đź“° News Worthy

What is CVE-2023-32605?

Trend Micro Apex Central (on-premise) is susceptible to authenticated reflected cross-site scripting (XSS) attacks due to insufficient user input validation and sanitization. An attacker who has successfully authenticated to Apex Central can exploit this vulnerability to execute malicious scripts in the context of the user's session. This could lead to unauthorized actions being performed on behalf of the user or the theft of sensitive information. Organizations using affected versions are advised to implement necessary updates and security measures to mitigate potential risks.

Affected Version(s)

Trend Micro Apex Central 2019 (8.0) < 8.0.0.6394

News Articles

favicon imageThe Cyber Express

Trend Micro Apex Central Vulnerabilities Patched In May List

Trend Micro Apex Central vulnerabilities have been patched. The May bulletin issued by Trend Micro released Patch 4 (B6394) for Apex Central

3 weeks ago

References

https://success.trendmicro.com/dcx/s/solution/000293107?l...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • đź“°

    First article discovered by The Cyber Express

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-32605 : Authenticated Reflected XSS Vulnerability in Trend Micro Apex Central