VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 17, 2025· Updated Jun 17, 2026

CVE-2025-49155

CVE-2025-49155

Description

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Trend Micro/Apex One3 versions
    cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*+ 2 more
    • cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*range: >=14.0.0.12994,<14.0.0.14002
    • cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*range: <14.0.14492
    • (no CPE)
  • Trend Micro, Inc./Trend Micro Apex Onev5
    cpe:2.3:a:trendmicro:apexone_op:14.0.0.14002:p3:*:*:*:*:*:*
    Range: 2019 (14.0)
  • Trend Micro, Inc./Trend Micro Apex One as a Servicev5
    cpe:2.3:a:trendmicro:apexone_saas:14.0.0.14492:ga:*:*:*:*:*:*
    Range: SaaS
  • Trend Micro/Apex One Data Loss Preventionllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.