apex_one Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/apex_one/ Sun, 26 Feb 2023 06:32:10 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png apex_one Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/apex_one/ 32 32 CVE-2019-19692 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19692/ Sun, 26 Feb 2023 06:32:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19692/ Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected.

The post CVE-2019-19692 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected.

The post CVE-2019-19692 appeared first on CVE Vulnerability.

]]> CVE-2019-19691 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19691/ Sun, 26 Feb 2023 06:32:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19691/ A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability.

The post CVE-2019-19691 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability.

The post CVE-2019-19691 appeared first on CVE Vulnerability.

]]> CVE-2019-18188 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18188/ Sun, 26 Feb 2023 06:31:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18188/ Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to the IUSR account, which has restricted permission […]

The post CVE-2019-18188 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to the IUSR account, which has restricted permission and is unable to make major system changes. An attempted attack requires user authentication.

The post CVE-2019-18188 appeared first on CVE Vulnerability.

]]> CVE-2022-45798 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-45798/ Thu, 23 Feb 2023 05:21:29 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-45798/ A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file. Please note: an attacker must first obtain the ability to execute […]

The post CVE-2022-45798 appeared first on CVE Vulnerability.

]]> A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-45798 appeared first on CVE Vulnerability.

]]> CVE-2022-45797 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-45797/ Thu, 23 Feb 2023 05:21:29 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-45797/ An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system […]

The post CVE-2022-45797 appeared first on CVE Vulnerability.

]]> An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-45797 appeared first on CVE Vulnerability.

]]> CVE-2022-44648 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-44648/ Thu, 23 Feb 2023 05:21:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-44648/ An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but […]

The post CVE-2022-44648 appeared first on CVE Vulnerability.

]]> An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not the same as CVE-2022-44647.

The post CVE-2022-44648 appeared first on CVE Vulnerability.

]]> CVE-2022-44654 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-44654/ Thu, 23 Feb 2023 05:21:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-44654/ Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. The affected component’s memory protection mechanism has been updated to enhance product security.

The post CVE-2022-44654 appeared first on CVE Vulnerability.

]]> Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. The affected component’s memory protection mechanism has been updated to enhance product security.

The post CVE-2022-44654 appeared first on CVE Vulnerability.

]]> CVE-2022-44653 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-44653/ Thu, 23 Feb 2023 05:21:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-44653/ A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44653 appeared first on CVE Vulnerability.

]]> A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44653 appeared first on CVE Vulnerability.

]]> CVE-2022-44652 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-44652/ Thu, 23 Feb 2023 05:21:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-44652/ An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44652 appeared first on CVE Vulnerability.

]]> An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44652 appeared first on CVE Vulnerability.

]]> CVE-2022-44651 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-44651/ Thu, 23 Feb 2023 05:21:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-44651/ A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44651 appeared first on CVE Vulnerability.

]]> A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2022-44651 appeared first on CVE Vulnerability.

]]>