Server-side Request Forgery Vulnerability in Trend Micro Apex Central

CVE-2025-30678

What is CVE-2025-30678?

A vulnerability exists in the modTMSM component of Trend Micro Apex Central (on-premise) that could permit attackers to exploit SSRF weaknesses. By manipulating specific parameters, unauthorized parties can gain access to sensitive information on affected installations. This issue poses significant risks to the confidentiality of data and could be leveraged for further attacks, highlighting the importance of immediate mitigation measures.

References