JVNDB-2022-001948

Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service

Trend Micro Incorporated has released security updates for Apex One and Apex One as a Service.

Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

Trend Micro, Inc.

• Apex One 2019
• Apex One SaaS

* Privilege escalation and arbitrary DLL loading due to an incorrect permission assignment vulnerability
* Privilege escalation and arbitrary DLL loading due to an uncontrolled search path element vulnerability

[Update the software]
Update the software to the latest version according to the information provided by the developer.
The issue in Apex One as a Service is fixed in the March 2022 updates.

Trend Micro, Inc.

• Trend Micro : SECURITY BULLETIN: May 2022 Security Bulletin for Trend Micro Apex One

1. CVE-2022-30700
2. CVE-2022-30701

1. JVN : JVNVU#90675050

• [2022/06/03]
    Web page was published