← Back

CVE-2025-30678

nvd nist
Published: Jun 17, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

Affected (12)

Trendmicro
1 product
Apex Central
Configuration A
12 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Trendmicro
Apex Central
Version 2019
Apex Central
Version 2019 build_3752
Apex Central
Version 2019 build_5158
Apex Central
Version 2019 build_6016
Apex Central
Version 2019 build_6288
Apex Central
Version 2019 build_6394
Apex Central
Version 2019 build_6481
Apex Central
Version 2019 build_6511
Apex Central
Version 2019 build_6571
Apex Central
Version 2019 build_6658
Apex Central
Version 2019 build_6660
Apex Central
Version 2019 build_6890
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

Source: security@trendmicro.com
Vendor Advisory
Source: security@trendmicro.com
Third Party Advisory

Timeline

No history available yet.