Known vulnerabilities in Apex One - page 5

Vendor: Trend Micro
Software: Apex One
Software CPE: cpe:2.3:a:trend_micro:apex_one:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 160
Public exploits: 3
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apex One Apex One is affected by 160 known vulnerabilities: 7 critical, 10 high, 44 medium, 99 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69190 - Security Features
CVE-2022-44654		 CWE-254 Medium
No
No
 SP1 b11128 09.11.2022 SB2022110957
SB2023020863
#VU68069 - Permissions, Privileges, and Access Controls
CVE-2022-41748		 CWE-264 Low
No
No
 CP 11102 08.10.2022 SB2022100805
#VU68068 - Improper Certificate Validation
CVE-2022-41747		 CWE-295 Low
No
No
 CP 11102 08.10.2022 SB2022100805
#VU68067 - Missing Authorization
CVE-2022-41746		 CWE-862 Medium
No
No
 CP 11102 08.10.2022 SB2022100805
#VU68066 - Out-of-bounds read
CVE-2022-41745		 CWE-125 Low
No
No
 CP 11102 08.10.2022 SB2022100805
#VU68065 - Improper input validation
CVE-2022-41749		 CWE-20 Low
No
No
 CP 11102 08.10.2022 SB2022100805
#VU68064 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-41744		 CWE-367 Low
No
No
 CP 11102 08.10.2022 SB2022100805
#VU67212 - Improper Authentication
CVE-2022-40144		 CWE-287 Medium
No
No
 CP 11092 13.09.2022 SB2022091318
#VU67211 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-40143		 CWE-59 Low
No
No
 CP 11092 13.09.2022 SB2022091318
#VU67210 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-40142		 CWE-59 Low
No
No
 CP 11092 13.09.2022 SB2022091318
#VU67209 - Cryptographic Issues
CVE-2022-40141		 CWE-310 Medium
No
No
 CP 11092 13.09.2022 SB2022091318
#VU67208 - Insufficient Verification of Data Authenticity
CVE-2022-40140		 CWE-345 Low
No
No
 CP 11092 13.09.2022 SB2022091318
#VU67207 - Insufficient Verification of Data Authenticity
CVE-2022-40139		 CWE-345 High
No
Exploited
 CP 11092 13.09.2022 SB2022091318
#VU65870 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-36336		 CWE-59 Low
No
No
 - 28.07.2022 SB2022072843
#VU63749 - Incorrect Default Permissions
CVE-2022-30700		 CWE-276 Low
No
No
 CP 10101 26.05.2022 SB2022052628
#VU63748 - Untrusted Search Path
CVE-2022-30701		 CWE-426 Low
No
No
 CP 10101 26.05.2022 SB2022052628
#VU60626 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-24680		 CWE-59 Low
No
No
 CP B10071 15.02.2022 SB2022021515
SB2022022219
#VU60625 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-24679		 CWE-59 Low
No
No
 CP B10071 15.02.2022 SB2022021515
SB2022022219
#VU60624 - Resource exhaustion
CVE-2022-24678		 CWE-400 Medium
No
No
 CP B10071 15.02.2022 SB2022021515
SB2022022219
#VU59107 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44024		 CWE-59 Low
No
No
 Patch 6 B10048 29.12.2021 SB2021122903
SB2021122904


Showing elements 81 - 100 out of 160