Known vulnerabilities in Apex Central

Vendor: Trend Micro
Software: Apex Central
Software CPE: cpe:2.3:a:trend_micro:apex_central:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 40
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apex Central Apex Central is affected by 40 known vulnerabilities: 4 critical, 2 high, 20 medium, 14 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123524 - Improper Authentication
CVE-2025-71209		 CWE-287 Medium
No
No
 2019 b7190 04.03.2026 SB2026010760
#VU123523 - Improper Authentication
CVE-2025-71208		 CWE-287 Medium
No
No
 2019 b7190 04.03.2026 SB2026010760
#VU123522 - Server-Side Request Forgery (SSRF)
CVE-2025-71207		 CWE-918 Low
No
No
 2019 b7190 04.03.2026 SB2026010760
#VU123521 - Server-Side Request Forgery (SSRF)
CVE-2025-71206		 CWE-918 Low
No
No
 2019 b7190 04.03.2026 SB2026010760
#VU123520 - Server-Side Request Forgery (SSRF)
CVE-2025-71205		 CWE-918 Low
No
No
 2019 b7190 04.03.2026 SB2026010760
#VU121043 - Out-of-bounds read
CVE-2025-69260		 CWE-125 Medium
No
No
 2019 b7190 07.01.2026 SB2026010760
#VU121042 - Unchecked Return Value
CVE-2025-69259		 CWE-252 Medium
No
No
 2019 b7190 07.01.2026 SB2026010760
#VU121041 - Exposed Dangerous Method or Function
CVE-2025-69258		 CWE-749 Critical
No
No
 2019 b7190 07.01.2026 SB2026010760
#VU111032 - Deserialization of Untrusted Data
CVE-2025-49220		 CWE-502 Critical
No
No
 2019 b7007 11.06.2025 SB2025061104
#VU111031 - Deserialization of Untrusted Data
CVE-2025-49219		 CWE-502 Critical
No
No
 2019 b7007 11.06.2025 SB2025061104
#VU109976 - Undefined Behavior for Input to API
CVE-2025-47866		 CWE-475 Medium
No
No
 2019 b6955 30.05.2025 SB2025040220
#VU109973 - Undefined Behavior for Input to API
CVE-2025-47865		 CWE-475 Medium
No
No
 2019 b6955 30.05.2025 SB2025040220
#VU109972 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-47867		 CWE-74 Medium
No
No
 2019 b6955 30.05.2025 SB2025040220
#VU107431 - Server-Side Request Forgery (SSRF)
CVE-2025-30680		 CWE-918 Medium
No
No
 2019 b6955 14.04.2025 SB2025040220
#VU106390 - Server-Side Request Forgery (SSRF)
CVE-2025-30679		 CWE-918 High
No
No
 2019 b6955 02.04.2025 SB2025040220
#VU106389 - Server-Side Request Forgery (SSRF)
CVE-2025-30678		 CWE-918 High
No
No
 2019 b6955 02.04.2025 SB2025040220
#VU85315 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-52329		 CWE-79 Low
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85316 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-52330		 CWE-79 Low
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85317 - Server-Side Request Forgery (SSRF)
CVE-2023-52331		 CWE-918 Medium
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-52327		 CWE-79 Low
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991


Showing elements 1 - 20 out of 40