CVE-2023-32533

EPSS 1.9%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Jun 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535.

Affected products

Trend Micro, Inc. · Trend Micro Apex Central

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US https://www.zerodayinitiative.com/advisories/ZDI-23-726/