Vulnerabilities > Trendmicro > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-01-23 CVE-2023-41178 Cross-site Scripting vulnerability in Trendmicro Mobile Security 9.8
Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41176.
network
low complexity
trendmicro CWE-79
6.1
2024-01-23 CVE-2023-52326 Cross-site Scripting vulnerability in Trendmicro Apex Central 2019
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327.
network
low complexity
trendmicro CWE-79
6.1
2024-01-23 CVE-2023-52327 Cross-site Scripting vulnerability in Trendmicro Apex Central 2019
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328.
network
low complexity
trendmicro CWE-79
6.1
2024-01-23 CVE-2023-52328 Cross-site Scripting vulnerability in Trendmicro Apex Central 2019
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329.
network
low complexity
trendmicro CWE-79
6.1
2024-01-23 CVE-2023-52329 Cross-site Scripting vulnerability in Trendmicro Apex Central 2019
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326.
network
low complexity
trendmicro CWE-79
6.1
2024-01-23 CVE-2023-52330 Cross-site Scripting vulnerability in Trendmicro Apex ONE
A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
network
low complexity
trendmicro CWE-79
6.1
2023-06-26 CVE-2023-30902 Unspecified vulnerability in Trendmicro Apex ONE 14.0.10349/2019
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations.
local
low complexity
trendmicro
5.5
2023-06-26 CVE-2023-32525 Unspecified vulnerability in Trendmicro Mobile Security 9.8
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.
network
low complexity
trendmicro
6.5
2023-06-26 CVE-2023-32526 Unspecified vulnerability in Trendmicro Mobile Security 9.8
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.
network
low complexity
trendmicro
6.5
2023-06-26 CVE-2023-32531 Cross-site Scripting vulnerability in Trendmicro Apex Central 2019
Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32532 through 32535.
network
low complexity
trendmicro CWE-79
6.1