Known vulnerabilities in Apex Central - page 2

Vendor: Trend Micro
Software: Apex Central
Software CPE: cpe:2.3:a:trend_micro:apex_central:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 40
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apex Central Apex Central is affected by 40 known vulnerabilities: 4 critical, 2 high, 20 medium, 14 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-52328		 CWE-79 Low
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-52326		 CWE-79 Low
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85231 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-52325		 CWE-98 Medium
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU85230 - Unrestricted Upload of File with Dangerous Type
CVE-2023-52324		 CWE-434 Medium
No
No
 2019 Patch 8 b6658 09.01.2024 SB2024010991
#VU78690 - Server-Side Request Forgery (SSRF)
CVE-2023-38624		 CWE-918 Medium
No
No
 2019 Patch 5 b6481 26.07.2023 SB2023072643
#VU78691 - Server-Side Request Forgery (SSRF)
CVE-2023-38625		 CWE-918 Medium
No
No
 2019 Patch 5 b6481 26.07.2023 SB2023072643
#VU78692 - Server-Side Request Forgery (SSRF)
CVE-2023-38626		 CWE-918 Medium
No
No
 2019 Patch 5 b6481 26.07.2023 SB2023072643
#VU78693 - Server-Side Request Forgery (SSRF)
CVE-2023-38627		 CWE-918 Medium
No
No
 2019 Patch 5 b6481 26.07.2023 SB2023072643
#VU76217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32536		 CWE-79 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76218 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32604		 CWE-79 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32605		 CWE-79 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32537		 CWE-79 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32531		 CWE-79 Medium
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32532		 CWE-79 Medium
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32533		 CWE-79 Medium
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32534		 CWE-79 Medium
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32535		 CWE-79 Medium
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76211 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-32530		 CWE-89 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU76210 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-32529		 CWE-89 Low
No
No
 2019 Patch4 b6394 16.05.2023 SB20230516112
#VU61811 - Unrestricted Upload of File with Dangerous Type
CVE-2022-26871		 CWE-434 Critical
No
Exploited
 2019 Patch3 b6016 03.04.2022 SB2022040301


Showing elements 21 - 40 out of 40