CVEvulnerability
CVE-2025-49155
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427
Description
An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.
Affected configurations
• trendmicro apex one (< 14.0.14492)
• trendmicro apex one (>= 14.0.0.12994 < 14.0.0.14002)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://success.trendmicro.com/en-US/solution/KA-0019917 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-25-362/ Third Party Advisory