Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xcp-x784-h228

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.

EPSS

Процентиль: 18%
0.00058
Низкий

7.1 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.1
nvd
8 месяцев назад

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations. Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.

CVSS3: 7.1
fstec
больше 1 года назад

Уязвимость средства мониторинга и управления безопасностью Trend Micro Apex Central, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 18%
0.00058
Низкий

7.1 High

CVSS3

Дефекты

CWE-918