Multiple critical security vulnerabilities in the Trend Micro Apex One enterprise security platform could enable attackers to inject malicious code and escalate privileges on affected systems. The company released emergency patches on June 9, 2025, to address five distinct vulnerabilities tracked under CVE-2025-49154 through CVE-2025-49158, with severity ratings ranging from medium to high on the CVSS 3.0 scale. These vulnerabilities include insecure access control, remote code execution, and privilege escalation, which could lead to significant security breaches if exploited.
Source: https://cybersecuritynews.com/trend-micro-apex-one-vulnerability/
TPRM report: https://scoringcyber.rankiteo.com/company/trend-micro
"id": "tre302061225",
"linkid": "trend-micro",
"type": "Vulnerability",
"date": "6/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Cybersecurity',
'name': 'Trend Micro',
'type': 'Enterprise'}],
'attack_vector': ['Local', 'Remote'],
'date_publicly_disclosed': '2025-06-09',
'description': 'Multiple critical security vulnerabilities in the Trend Micro '
'Apex One enterprise security platform could enable attackers '
'to inject malicious code and escalate privileges on affected '
'systems.',
'impact': {'systems_affected': ['Trend Micro Apex One']},
'lessons_learned': 'Review remote access policies and ensure perimeter '
'security configurations remain current.',
'motivation': ['Privilege Escalation', 'Code Injection'],
'post_incident_analysis': {'corrective_actions': ['Patch deployment'],
'root_causes': ['Improper access control',
'Uncontrolled search path',
'Link-following vulnerability']},
'recommendations': 'Immediate deployment of patches across all Apex One '
'installations.',
'references': [{'source': 'Trend Micro'}],
'response': {'communication_strategy': 'Public disclosure and advisory',
'containment_measures': 'Emergency patches released',
'remediation_measures': 'Patches available through Trend Micro’s '
'Download Center'},
'title': 'Multiple Critical Vulnerabilities in Trend Micro Apex One Platform',
'type': 'Vulnerability Exploitation',
'vulnerability_exploited': ['CVE-2025-49154',
'CVE-2025-49155',
'CVE-2025-49156',
'CVE-2025-49157',
'CVE-2025-49158']}