High severity7.1NVD Advisory· Published Jun 17, 2025· Updated Jun 17, 2026
CVE-2025-30680
CVE-2025-30680
Description
A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.
Please note: this vulnerability only affects the SaaS instance of Apex Central - customers that automatically apply Trend Micro's monthly maintenance releases to the SaaS instance do not have to take any further action.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Trend Micro, Inc./Trend Micro Apex Centralv5cpe:2.3:a:trendmicro:apex_central:SaaS:*:*:en:*:windows_10:x86_64:1809Range: SaaS
Patches
Vulnerability mechanics
References
2- success.trendmicro.com/en-US/solution/KA-0019355nvdVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-25-238/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.