A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.
2023-06-26T22:15:10.977
2024-11-21T08:03:35.743
Modified
CVSSv3.1: 9.8 (CRITICAL)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | trendmicro | apex_one | < 14.0.12105 | Yes |
Application | trendmicro | apex_one | 2019 | Yes |
Operating System | microsoft | windows | - | No |