CVE-2025-47867highCWE-74

CVE-2025-47867: high-severity vulnerability in Trend Micro Apex Central

Published · Updated

Follow this CVE+ Monitor Trend Micro Apex Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.9%
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Trend Micro, Inc. · Trend Micro Apex Central
Related CVEs — Trend Micro Apex Central

In the same product, most dangerous first.

CVE-2023-52325HIGHCVE-2023-52325EPSS 4.5%CVE-2023-52324HIGHCVE-2023-52324EPSS 4.1%CVE-2025-69258CRITICALCVE-2025-69258EPSS 3.6%CVE-2023-52328MEDIUMCVE-2023-52328EPSS 2.5%CVE-2023-52327MEDIUMCVE-2023-52327EPSS 2.5%CVE-2023-52326MEDIUMCVE-2023-52326EPSS 2.5%