Trend Micro Apex Central Arbitrary File Upload Vulnerability

概要

参考情報

• appweb.trendmicro.com/supportNews/NewsDetail.aspx · Vendor Advisory
• jvn.jp/vu/JVNVU99107357 · Third Party Advisory
• success.trendmicro.com/jp/solution/000290660 · Mitigation
• success.trendmicro.com/solution/000290678 · Mitigation
• jpcert.or.jp/english/at/2022/at220008.html · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2022-26871

apex central のその他の脆弱性

• CVE-2025-69260高 7.5A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition…
• CVE-2025-69259高 7.5A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service …
• CVE-2025-69258緊急 9.8A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL …
• CVE-2025-30680高 7.1A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain paramete…
• CVE-2025-30679高 7.5A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to man…