CVE-2023-32604 — Trend Micro, Inc. / Trend Micro Apex Central

Description (CNA)

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32605.

Affected (CNA)

Vendor / product	Versions
Trend Micro, Inc. / Trend Micro Apex Central	affected 2019 (8.0) before 8.0.0.6394

CWE

No CWE identifiers supplied.

References

https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US

ADP enrichment

CVE

No English description supplied.

https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US

CISA-ADP

No English description supplied.

No references supplied.