CVE-2023-32557

9.8 criticalEPSS 1.2%

Critical (9.8) in trendmicro apex one. EPSS 1.2% chance of exploitation in the next 30 days.

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:apex_one

References

https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US
https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US

Check your stack JSON