CVE-2025-49155: high-severity vulnerability in Trend Micro Apex One
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.9%
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Trend Micro, Inc. · Trend Micro Apex OneTrend Micro, Inc. · Trend Micro Apex One as a ServiceRelated CVEs — Trend Micro Apex One
In the same product, most dangerous first.