Medium severity5.3NVD Advisory· Published Jun 26, 2023· Updated Jun 17, 2026

CVE-2023-32552

Description

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive information on agents.

This is similar to, but not identical to CVE-2023-32553

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Apex One3 versions
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*range: <14.0.12105
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
- (no CPE)
Trend Micro/Apex One As A Servicellm-fuzzy
Trend Micro, Inc./Trend Micro Apex Onev5
Range: 2019

Patches

Vulnerability mechanics

References

success.trendmicro.com/dcx/s/solution/000293108nvdPatchVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-23-655/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000