Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.
Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability.
This is similar to, but not identical to CVE-2023-32604.
CVE ID: CVE-2023-32605
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Vendor: Trend Micro, Inc.
Product: Trend Micro Apex Central
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 20.78% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)