Vulnerability-Lookup

CVE-2025-71211 (GCVE-0-2025-71211)

Vulnerability from cvelistv5 – Published: 2026-05-21 13:02 – Updated: 2026-05-21 14:09

Summary

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required. For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory

Assigner

trendmicro

References

2 references

URL	Tags
https://success.trendmicro.com/en-US/solution/KA-…
https://www.zerodayinitiative.com/advisories/ZDI-…

Impacted products

2 products

Vendor	Product	Version
Trend Micro, Inc.	TrendAI Apex One	Affected: 2019 (14.0) , < 14.0.0.14136 (semver) cpe:2.3:a:trendmicro:apexone_op:14.0.0.14136:::::::*
Trend Micro, Inc.	TrendAI Apex One as a Service	Affected: SaaS , < 14.0.20315 (semver) cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20315:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-71211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-21T14:09:32.804946Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-21T14:09:53.718Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:trendmicro:apexone_op:14.0.0.14136:*:*:*:*:*:*:*"
          ],
          "product": "TrendAI Apex One",
          "vendor": "Trend Micro, Inc.",
          "versions": [
            {
              "lessThan": "14.0.0.14136",
              "status": "affected",
              "version": "2019 (14.0)",
              "versionType": "semver"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20315:*:*:*:*:*:*:*"
          ],
          "product": "TrendAI Apex One as a Service",
          "vendor": "Trend Micro, Inc.",
          "versions": [
            {
              "lessThan": "14.0.20315",
              "status": "affected",
              "version": "SaaS",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. \r\n\r\nPlease note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.\r\n\r\nFor this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console\ufffds IP address exposed externally should consider mitigating factors such as source restrictions if not already applied."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-21T13:02:02.834Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/en-US/solution/KA-0022458"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-137/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2025-71211",
    "datePublished": "2026-05-21T13:02:02.834Z",
    "dateReserved": "2026-02-11T16:33:44.102Z",
    "dateUpdated": "2026-05-21T14:09:53.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-71211",
      "date": "2026-05-25",
      "epss": "0.00431",
      "percentile": "0.62734"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-71211\",\"sourceIdentifier\":\"security@trendmicro.com\",\"published\":\"2026-05-21T14:16:43.663\",\"lastModified\":\"2026-05-21T15:05:28.023\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. \\r\\n\\r\\nPlease note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.\\r\\n\\r\\nFor this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console\ufffds IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@trendmicro.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"security@trendmicro.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"references\":[{\"url\":\"https://success.trendmicro.com/en-US/solution/KA-0022458\",\"source\":\"security@trendmicro.com\"},{\"url\":\"https://www.zerodayinitiative.com/advisories/ZDI-26-137/\",\"source\":\"security@trendmicro.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-71211\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-21T14:09:32.804946Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-21T14:09:47.878Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:trendmicro:apexone_op:14.0.0.14136:*:*:*:*:*:*:*\"], \"vendor\": \"Trend Micro, Inc.\", \"product\": \"TrendAI Apex One\", \"versions\": [{\"status\": \"affected\", \"version\": \"2019 (14.0)\", \"lessThan\": \"14.0.0.14136\", \"versionType\": \"semver\"}]}, {\"cpes\": [\"cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20315:*:*:*:*:*:*:*\"], \"vendor\": \"Trend Micro, Inc.\", \"product\": \"TrendAI Apex One as a Service\", \"versions\": [{\"status\": \"affected\", \"version\": \"SaaS\", \"lessThan\": \"14.0.20315\", \"versionType\": \"semver\"}]}], \"references\": [{\"url\": \"https://success.trendmicro.com/en-US/solution/KA-0022458\"}, {\"url\": \"https://www.zerodayinitiative.com/advisories/ZDI-26-137/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. \\r\\n\\r\\nPlease note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.\\r\\n\\r\\nFor this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console\\ufffds IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-22\", \"description\": \"CWE-22: Improper Limitation of a Pathname to a Restricted Directory\"}]}], \"providerMetadata\": {\"orgId\": \"7f7bd7df-cffe-4fdb-ab6d-859363b89272\", \"shortName\": \"trendmicro\", \"dateUpdated\": \"2026-05-21T13:02:02.834Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-71211\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-21T14:09:53.718Z\", \"dateReserved\": \"2026-02-11T16:33:44.102Z\", \"assignerOrgId\": \"7f7bd7df-cffe-4fdb-ab6d-859363b89272\", \"datePublished\": \"2026-05-21T13:02:02.834Z\", \"assignerShortName\": \"trendmicro\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0206

Vulnerability from certfr_avis - Published: 2026-02-25 - Updated: 2026-02-25

De multiples vulnérabilités ont été découvertes dans les produits Trend Micro. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Trend Micro	Apex One	Trend Vision One Endpoint Standard Endpoint Protection versions antérieures à 14.0.20315
Trend Micro	Apex One	Apex One versions antérieures à CP Build 14136
Trend Micro	Apex One	Apex One as a Service versions antérieures à 14.0.20315

References

Title

Publication Time

FKIE_CVE-2025-71211

Vulnerability from fkie_nvd - Published: 2026-05-21 14:16 - Updated: 2026-05-21 15:05

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security@trendmicro.com	https://success.trendmicro.com/en-US/solution/KA-0022458
	security@trendmicro.com	https://www.zerodayinitiative.com/advisories/ZDI-26-137/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. \r\n\r\nPlease note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.\r\n\r\nFor this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console\ufffds IP address exposed externally should consider mitigating factors such as source restrictions if not already applied."
    }
  ],
  "id": "CVE-2025-71211",
  "lastModified": "2026-05-21T15:05:28.023",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "security@trendmicro.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-05-21T14:16:43.663",
  "references": [
    {
      "source": "security@trendmicro.com",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0022458"
    },
    {
      "source": "security@trendmicro.com",
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-137/"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "security@trendmicro.com",
      "type": "Secondary"
    }
  ]
}

GHSA-QVWW-2VWG-9RP6

Vulnerability from github – Published: 2026-05-21 15:34 – Updated: 2026-05-21 15:34

Details

Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.

For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-71211"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-05-21T14:16:43Z",
    "severity": "CRITICAL"
  },
  "details": "A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. \n\nPlease note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.\n\nFor this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console\ufffds IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.",
  "id": "GHSA-qvww-2vwg-9rp6",
  "modified": "2026-05-21T15:34:09Z",
  "published": "2026-05-21T15:34:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71211"
    },
    {
      "type": "WEB",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0022458"
    },
    {
      "type": "WEB",
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-137"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

JVNDB-2026-005746

Vulnerability from jvndb - Published: 2026-03-04 10:40 - Updated:2026-03-04 10:40

Summary

Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (February 2026)

Details

Trend Micro Incorporated has released security updates for Endpoint security products for enterprises. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU92256509/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71210
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71211
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71212
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71213
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71214
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71215
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71216
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-71217

Impacted products

Vendor

Product

	Trend Micro, Inc.	Trend Micro Apex One
	Trend Micro, Inc.	Trend Vision One

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-005746.html",
  "dc:date": "2026-03-04T10:40+09:00",
  "dcterms:issued": "2026-03-04T10:40+09:00",
  "dcterms:modified": "2026-03-04T10:40+09:00",
  "description": "Trend Micro Incorporated has released security updates for Endpoint security products for enterprises.\r\nTrend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-005746.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:trendmicro:trend_micro_apex_one",
      "@product": "Trend Micro Apex One",
      "@vendor": "Trend Micro, Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:trendmicro:trend_vision_one",
      "@product": "Trend Vision One",
      "@vendor": "Trend Micro, Inc.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2026-005746",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU92256509/index.html",
      "@id": "JVNVU#92256509",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71210",
      "@id": "CVE-2025-71210",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71211",
      "@id": "CVE-2025-71211",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71212",
      "@id": "CVE-2025-71212",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71213",
      "@id": "CVE-2025-71213",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71214",
      "@id": "CVE-2025-71214",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71215",
      "@id": "CVE-2025-71215",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71216",
      "@id": "CVE-2025-71216",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-71217",
      "@id": "CVE-2025-71217",
      "@source": "CVE"
    }
  ],
  "title": "Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (February 2026)"
}

WID-SEC-W-2026-0509

Vulnerability from csaf_certbund - Published: 2026-02-24 23:00 - Updated: 2026-03-03 23:00

Summary

Trend Micro Apex One: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Trend Micro Apex One ist eine Endpoint-Security Lösung.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuführen, und um seine Privilegien zu erhöhen.

Betroffene Betriebssysteme: - Linux - UNIX - Windows

CVE-2025-71210

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71211

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71212

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71213

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71214

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71215

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71216

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

CVE-2025-71217

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Trend Micro Apex One <14.0.20315 Trend Micro / Apex One		<14.0.20315
Trend Micro Apex One <CP Build 14136 Trend Micro / Apex One		<CP Build 14136

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://success.trendmicro.com/en-US/solution/KA-…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Trend Micro Apex One ist eine Endpoint-Security L\u00f6sung.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuf\u00fchren, und um seine Privilegien zu erh\u00f6hen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0509 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0509.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0509 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0509"
      },
      {
        "category": "external",
        "summary": "Trend Micro Security Advisory vom 2026-02-24",
        "url": "https://success.trendmicro.com/en-US/solution/KA-0022458"
      }
    ],
    "source_lang": "en-US",
    "title": "Trend Micro Apex One: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-03T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-04T11:19:29.065+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0509",
      "initial_release_date": "2026-02-24T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-02-24T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-03T23:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: ZDI-26-142, ZDI-26-143, ZDI-26-136, ZDI-26-137, ZDI-26-138, ZDI-26-139, ZDI-26-140, ZDI-26-141"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cCP Build 14136",
                "product": {
                  "name": "Trend Micro Apex One \u003cCP Build 14136",
                  "product_id": "T051170"
                }
              },
              {
                "category": "product_version",
                "name": "CP Build 14136",
                "product": {
                  "name": "Trend Micro Apex One CP Build 14136",
                  "product_id": "T051170-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:trendmicro:apex_one:cp_build_14136"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c14.0.20315",
                "product": {
                  "name": "Trend Micro Apex One \u003c14.0.20315",
                  "product_id": "T051171"
                }
              },
              {
                "category": "product_version",
                "name": "14.0.20315",
                "product": {
                  "name": "Trend Micro Apex One 14.0.20315",
                  "product_id": "T051171-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:trendmicro:apex_one:14.0.20315"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Apex One"
          }
        ],
        "category": "vendor",
        "name": "Trend Micro"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-71210",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71210"
    },
    {
      "cve": "CVE-2025-71211",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71211"
    },
    {
      "cve": "CVE-2025-71212",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71212"
    },
    {
      "cve": "CVE-2025-71213",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71213"
    },
    {
      "cve": "CVE-2025-71214",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71214"
    },
    {
      "cve": "CVE-2025-71215",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71215"
    },
    {
      "cve": "CVE-2025-71216",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71216"
    },
    {
      "cve": "CVE-2025-71217",
      "product_status": {
        "known_affected": [
          "T051171",
          "T051170"
        ]
      },
      "release_date": "2026-02-24T23:00:00.000+00:00",
      "title": "CVE-2025-71217"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-71211 (GCVE-0-2025-71211)

CERTFR-2026-AVI-0206

Solutions

FKIE_CVE-2025-71211

GHSA-QVWW-2VWG-9RP6

JVNDB-2026-005746

WID-SEC-W-2026-0509

Tags

Sightings

Nomenclature