Description (CNA)
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro, Inc. / Trend Micro Apex One | affected 2019 (14.0) before 14.0.0.14002 |
| Trend Micro, Inc. / Trend Micro Apex One as a Service | affected SaaS before 14.0.14492 |
CWE
CWE-427
References
- https://success.trendmicro.com/en-US/solution/KA-0019917
- https://www.zerodayinitiative.com/advisories/ZDI-25-362/
ADP enrichment
No English description supplied.
No references supplied.