Description
Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| TrendAI Apex One | Trend Micro, Inc. / TrendAI Apex One | >= 2019 (14.0), < 14.0.0.17079 | affected |
| TrendAI Apex One as a Service | Trend Micro, Inc. / TrendAI Apex One as a Service | >= SaaS, < 14.0.20731 | affected |