Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Apex One | affected |
|
||||||
| Trend Micro, Inc. | Trend Micro Apex One as a Service | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-36025 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. |
Tue, 15 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Thu, 27 Mar 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 04 Oct 2024 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Trendmicro
Trendmicro apex One |
|
| Weaknesses | CWE-59 | |
| CPEs | cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:* | |
| Vendors & Products |
Trendmicro
Trendmicro apex One |
MITRE
Status: PUBLISHED
Assigner: trendmicro
Published:
Updated: 2025-03-27T20:40:36.799Z
Reserved: 2024-05-23T19:30:36.177Z
Link: CVE-2024-36306
Vulnrichment
Updated: 2024-08-02T03:37:04.320Z
NVD
Status : Modified
Published: 2024-06-10T22:15:10.857
Modified: 2025-03-27T21:15:49.143
Link: CVE-2024-36306
Redhat
No data.
OpenCVE Enrichment
No data.