↓ Skip to main content

CVE-2023-32530 - Trend Micro Apex Central SQL injection via certificates

··1 min

According to the technical write-up by STAR Labs, CVE-2023-32530 is a SQL injection vulnerability in the web-based management interface of Trend Micro Apex Central (on-premise). This vulnerability could allow an authenticated user to perform a SQL injection attack that could lead to remote code execution. The vulnerability is caused by insufficient input validation in the affected software. The vendor has released a patch to address this vulnerability.