Apex One and Apex Central
CVE-2023-32557: Path traversal in Trend Micro Apex One
A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro Apex One 2019 | 14.0.0.12024 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.