Description
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Apex Central | 2019 (on-premise), SaaS |
References
- https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435Vendor Advisory
- https://jvn.jp/vu/JVNVU99107357Third Party Advisory, VDB Entry
- https://success.trendmicro.com/jp/solution/000290660Mitigation, Patch, Vendor Advisory
- https://success.trendmicro.com/solution/000290678Mitigation, Patch, Vendor Advisory
- https://www.jpcert.or.jp/english/at/2022/at220008.htmlThird Party Advisory, VDB Entry
- https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435Vendor Advisory
- https://jvn.jp/vu/JVNVU99107357Third Party Advisory, VDB Entry
- https://success.trendmicro.com/jp/solution/000290660Mitigation, Patch, Vendor Advisory
- https://success.trendmicro.com/solution/000290678Mitigation, Patch, Vendor Advisory
- https://www.jpcert.or.jp/english/at/2022/at220008.htmlThird Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871US Government Resource
Timeline
- Published
- Mar 29, 2022
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Mar 31, 2022
- NVD status
- Analyzed