Apex One and Apex Central
CVE-2023-52324: Unrestricted file upload in Trend Micro Apex Central
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro Apex Central 2019 | 8.0.0.6570 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations.
Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials. Also, this vulnerability could be potentially used in combination with another vulnerability to execute arbitrary code.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.