CVE-2025-47865

Published: Jun 17, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.

Affected (12)

Products: Trendmicro: Apex Central

Trendmicro

1 product

Apex Central

Configuration A

12 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendmicro Apex Central	Version 2019
Trendmicro Apex Central	Version 2019 build_3752
Trendmicro Apex Central	Version 2019 build_5158
Trendmicro Apex Central	Version 2019 build_6016
Trendmicro Apex Central	Version 2019 build_6288
Trendmicro Apex Central	Version 2019 build_6394
Trendmicro Apex Central	Version 2019 build_6481
Trendmicro Apex Central	Version 2019 build_6511
Trendmicro Apex Central	Version 2019 build_6571
Trendmicro Apex Central	Version 2019 build_6658
Trendmicro Apex Central	Version 2019 build_6660
Trendmicro Apex Central	Version 2019 build_6890

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-475

Undefined Behavior for Input to API

The behavior of this function is undefined unless its control parameter is set to a specific value.

References (2)

https://success.trendmicro.com/en-US/solution/KA-0019355

Source: security@trendmicro.com

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-25-295/

Source: security@trendmicro.com

Third Party Advisory

Timeline

No history available yet.