Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xfcv-jhfx-64pp

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

EPSS

Процентиль: 90%
0.05832
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
8 месяцев назад

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

CVSS3: 9.8
fstec
около 1 года назад

Уязвимость реализации метода GetReportDetailView средства мониторинга и управления безопасностью Trend Micro Apex Central, позволяющая нарушителю выполнить произвольный код в контексте NETWORK SERVICE

EPSS

Процентиль: 90%
0.05832
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502