Description
A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.
Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trend Micro | Trend Micro Apex Central | SaaS – < 8.0.6955 | 8.0.6955 |
Advisories 2
- NCSC-2025-0175 Kwetsbaarheden verholpen in Trend Micro Apex Central NCSC-NL (Netherlands) · May 23, 2025
- WID-SEC-2025-0674 Trend Micro Apex Central: Mehrere Schwachstellen ermöglichen eine Offenlegung von Informationen BSI CERT-Bund (WID) · Apr 1, 2025