CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Trend Micro Apex One Management Console Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-54948)
[Affected Scope] Trend Micro Apex One (on-premise) management console
[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise
[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console
Trend Micro Apex One and OfficeScan Arbitrary File Write and Authentication Bypass Vulnerability (CVE-2020-8599) Security Advisory
[Affected Scope] Trend Micro Apex One (2019) and OfficeScan XG servers.
[Impact] Unauthenticated remote attackers can write arbitrary data to arbitrary paths, bypassing ROOT login and achieving full system compromise.
[Mitigation] Immediately apply the official Trend Micro Critical Patches (CP) and restrict access to management ports.