Server-Side Request Forgery Issue in Trend Micro Apex Central

CVE-2023-38627

What is CVE-2023-38627?

A server-side request forgery (SSRF) vulnerability exists in Trend Micro Apex Central 2019 prior to build 6481, enabling an attacker with low-privileged code execution on the target system to directly interact with internal or local services. This vulnerability poses a significant risk to the confidentiality and integrity of internal network resources. Mitigating this threat requires immediate updates to the affected product versions to prevent unauthorized access and potential exploitation.

References