Medium severity5.5NVD Advisory· Published Sep 19, 2022· Updated Jun 17, 2026

CVE-2022-40140

Description

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Apex One3 versions
cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*+ 2 more
- cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
- (no CPE)
Trend Micro/Apex One As A Servicellm-fuzzy
Trend Micro/Trend Microcpe-rescue
Range: 2019 (on-prem) and SaaS

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000291528nvdPatchVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-22-1189/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000