CVE-2023-32529

Katalog CVE

CVSS 8.8 · High EPSS 2,2%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada trendmicro apex central. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32530.

Rincian

Terbit di NVD

26 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 81,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US patch · advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-23-652/ advisory pihak ketiga · vdb entry