Find a vulnerability

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "TrendAI Vision One SEP sans le correctif 14.0.20731",
      "product": {
        "name": "Vision One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One sans le correctif de s\u00e9curit\u00e9 SP1 CP Build 18012",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One sans le correctif de s\u00e9curit\u00e9 SP1 CP Build 17079 (pour une nouvelle installation)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-45208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45208"
    },
    {
      "name": "CVE-2026-45206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45206"
    },
    {
      "name": "CVE-2026-45207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45207"
    },
    {
      "name": "CVE-2026-34928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34928"
    },
    {
      "name": "CVE-2026-34926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34926"
    },
    {
      "name": "CVE-2026-34930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34930"
    },
    {
      "name": "CVE-2026-34929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34929"
    },
    {
      "name": "CVE-2026-34927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34927"
    }
  ],
  "initial_release_date": "2026-05-22T00:00:00",
  "last_revision_date": "2026-05-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0642",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend Micro. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un contournement de la politique de s\u00e9curit\u00e9.\n\nTrend Micro indique que la vuln\u00e9rabilit\u00e9 CVE-2026-34926 est activement exploit\u00e9e",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2026-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0023430",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0023430"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Discovery Inspector versions 6.8 SP2 build x ant\u00e9rieures \u00e0 6.8 SP2 build 1053",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.7 SP1 build x ant\u00e9rieures \u00e0 6.7 SP1 build 1093",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.8 SP1 build x ant\u00e9rieures \u00e0 6.8 SP1 build 1135 ",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.6 build x ant\u00e9rieures \u00e0 6.6 build 1107",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.8 build x ant\u00e9rieures \u00e0 6.8 build 1139",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.5 build x ant\u00e9rieures \u00e0 6.5 build 1197",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.7 build x ant\u00e9rieures \u00e0 6.7 build 1116",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-15467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
    }
  ],
  "initial_release_date": "2026-03-24T00:00:00",
  "last_revision_date": "2026-03-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0348",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Trend Micro Deep Discovery Inspector. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Trend Micro Deep Discovery Inspector",
  "vendor_advisories": [
    {
      "published_at": "2026-03-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0022773",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0022773"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Trend Vision One Endpoint Standard Endpoint Protection versions ant\u00e9rieures \u00e0 14.0.20315",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions ant\u00e9rieures \u00e0 CP Build 14136",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service versions ant\u00e9rieures \u00e0 14.0.20315",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-71216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71216"
    },
    {
      "name": "CVE-2025-71217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71217"
    },
    {
      "name": "CVE-2025-71214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71214"
    },
    {
      "name": "CVE-2025-71212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71212"
    },
    {
      "name": "CVE-2025-54948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54948"
    },
    {
      "name": "CVE-2025-71215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71215"
    },
    {
      "name": "CVE-2025-71213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71213"
    },
    {
      "name": "CVE-2025-71210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71210"
    },
    {
      "name": "CVE-2025-71211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71211"
    },
    {
      "name": "CVE-2025-54987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54987"
    }
  ],
  "initial_release_date": "2026-02-25T00:00:00",
  "last_revision_date": "2026-02-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0206",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-02-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend Micro. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2026-02-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0022458",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0022458"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex Central versions ant\u00e9rieures \u00e0 Build 7190",
      "product": {
        "name": "Apex Central",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-69259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69259"
    },
    {
      "name": "CVE-2025-69260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69260"
    },
    {
      "name": "CVE-2025-69258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69258"
    }
  ],
  "initial_release_date": "2026-01-08T00:00:00",
  "last_revision_date": "2026-01-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0012",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-01-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Apex Central. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Apex Central",
  "vendor_advisories": [
    {
      "published_at": "2026-01-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0022071",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0022071"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One  20219 avec Integrated Endpoint Sensor (iES) server activ\u00e9 ",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "Un correctif est annonc\u00e9 pour janvier 2026. Cependant, l\u0027\u00e9diteur a mis \u00e0 disposition un outil de modification de la configuration de s\u00e9curit\u00e9.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
    }
  ],
  "initial_release_date": "2025-12-16T00:00:00",
  "last_revision_date": "2025-12-16T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-1115",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-12-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Trend Micro Apex One. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Trend Micro Apex One",
  "vendor_advisories": [
    {
      "published_at": "2025-12-15",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0021900",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0021900"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One (on-prem) sans le correctif FixTool_Aug2025",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que les vuln\u00e9rabilit\u00e9s CVE-2025-54948 et CVE-2025-54987 sont activement exploit\u00e9es.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-54948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54948"
    },
    {
      "name": "CVE-2025-54987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54987"
    }
  ],
  "initial_release_date": "2025-08-06T00:00:00",
  "last_revision_date": "2025-08-06T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0658",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Apex One. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Apex One",
  "vendor_advisories": [
    {
      "published_at": "2025-08-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0020652",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0020652"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Worry-Free Business Security Services versions ant\u00e9rieures \u00e0 6.7.3954 et 14.3.1299",
      "product": {
        "name": "Worry-Free Business Security",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Security agent pour Apex One as a Service versions ant\u00e9rieures \u00e0 14.0.14492",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex Central versions ant\u00e9rieures \u00e0 CP B7007",
      "product": {
        "name": "Apex Central",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex Central as a Service sans le correctif de s\u00e9curit\u00e9 d\u0027Avril 2025",
      "product": {
        "name": "Apex Central",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions ant\u00e9rieures \u00e0 SP1 CP Build 14002",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Trend Micro Endpoint Encryption PolicyServer sans correctif de s\u00e9curit\u00e9 Patch 1 Update 6 (Version 6.0.0.4013)",
      "product": {
        "name": "Trend Micro Endpoint Encryption",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Worry-Free Business Security versions ant\u00e9rieures \u00e0 10 SP1 Patch 2514",
      "product": {
        "name": "Worry-Free Business Security",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-49220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49220"
    },
    {
      "name": "CVE-2025-49219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49219"
    },
    {
      "name": "CVE-2025-49156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49156"
    },
    {
      "name": "CVE-2025-49155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49155"
    },
    {
      "name": "CVE-2025-49215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49215"
    },
    {
      "name": "CVE-2025-49214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49214"
    },
    {
      "name": "CVE-2025-49212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49212"
    },
    {
      "name": "CVE-2025-49157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49157"
    },
    {
      "name": "CVE-2025-49487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49487"
    },
    {
      "name": "CVE-2025-49216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49216"
    },
    {
      "name": "CVE-2025-49217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49217"
    },
    {
      "name": "CVE-2025-49213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49213"
    },
    {
      "name": "CVE-2025-49158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49158"
    },
    {
      "name": "CVE-2025-49211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49211"
    },
    {
      "name": "CVE-2025-49154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49154"
    },
    {
      "name": "CVE-2025-49218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49218"
    }
  ],
  "initial_release_date": "2025-06-27T00:00:00",
  "last_revision_date": "2025-06-27T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0544",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-06-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend Micro. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une injection SQL (SQLi).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2025-06-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0019936",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019936"
    },
    {
      "published_at": "2025-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0019926",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019926"
    },
    {
      "published_at": "2025-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0019928",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019928"
    },
    {
      "published_at": "2025-06-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0019917",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Security Agent versions 20.0.x ant\u00e9rieures \u00e0 20.0.1-25770 pour Windows",
      "product": {
        "name": "Deep Security Agent",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-30642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30642"
    },
    {
      "name": "CVE-2025-30640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30640"
    },
    {
      "name": "CVE-2025-30641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30641"
    }
  ],
  "initial_release_date": "2025-04-02T00:00:00",
  "last_revision_date": "2025-04-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0264",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-04-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Deep Security Agent. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Deep Security Agent",
  "vendor_advisories": [
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0019344",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019344"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Security Agent versions 20.0.x ant\u00e9rieures \u00e0 20.0.1-23340 pour Windows",
      "product": {
        "name": "Deep Security Agent",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-55955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55955"
    }
  ],
  "initial_release_date": "2024-12-19T00:00:00",
  "last_revision_date": "2024-12-19T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-1097",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-12-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Trend Micro Deep Security Agent. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Trend Micro Deep Security Agent",
  "vendor_advisories": [
    {
      "published_at": "2024-12-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0018571",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0018571"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One as a Service sans la mise \u00e0 jour de d\u00e9cembre 2024",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions ant\u00e9rieures \u00e0 SP1 build 13140",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-52049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52049"
    },
    {
      "name": "CVE-2024-55631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55631"
    },
    {
      "name": "CVE-2024-52048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52048"
    },
    {
      "name": "CVE-2024-52050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52050"
    },
    {
      "name": "CVE-2024-55917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55917"
    },
    {
      "name": "CVE-2024-55632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55632"
    }
  ],
  "initial_release_date": "2024-12-17T00:00:00",
  "last_revision_date": "2024-12-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-1086",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-12-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Apex One. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Apex One",
  "vendor_advisories": [
    {
      "published_at": "2024-12-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0018217",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0018217"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Security Agent versions ant\u00e9rieures \u00e0 20.0.1-21510",
      "product": {
        "name": "Deep Security Agent",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Security Notifier versions ant\u00e9rieures \u00e0 20.0.1",
      "product": {
        "name": "Deep Security Notifier",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-51503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-51503"
    }
  ],
  "initial_release_date": "2024-11-19T00:00:00",
  "last_revision_date": "2024-11-19T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-1002",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-11-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Trend Micro. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2024-11-18",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0018154",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0018154"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Service Gateway versions ant\u00e9rieures \u00e0 3.0.10",
      "product": {
        "name": "Service Gateway",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.7.x ant\u00e9rieures \u00e0 6.7 Cp 1107",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Inspector versions 6.6.x ant\u00e9rieures \u00e0 6.6 Cp 1097",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Trend Micro Web Gateway\t versions ant\u00e9rieures \u00e0 3.9.5.5840",
      "product": {
        "name": "Trend Micro Web Gateway",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Deep Discovery Email Inspector sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Deep Discovery Mail Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que les versions 5.8.x \u00e0 6.5.x de Deep Discovery Inspector sont affect\u00e9es par les vuln\u00e9rabilit\u00e9s CVE-2024-46902 et CVE-2024-46903 mais ne b\u00e9n\u00e9ficieront pas de correctifs de s\u00e9curit\u00e9. \nDeep Discovery Inspector et Deep Discovery Email Inspector sont affect\u00e9s par la vuln\u00e9rabilit\u00e9 CVE-2024-6387; il est n\u00e9cessaire de contacter l\u0027\u00e9diteur pour acc\u00e9der aux correctifs. ",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-46903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46903"
    },
    {
      "name": "CVE-2024-46902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46902"
    },
    {
      "name": "CVE-2006-5051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5051"
    },
    {
      "name": "CVE-2024-6387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6387"
    },
    {
      "name": "CVE-2008-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4109"
    }
  ],
  "initial_release_date": "2024-09-25T00:00:00",
  "last_revision_date": "2024-09-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0811",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-09-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend Micro. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0017793",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0017793"
    },
    {
      "published_at": "2024-09-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro KA-0016976",
      "url": "https://success.trendmicro.com/en-US/solution/KA-0016976"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Discovery Inspector sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Service Gateway versions ant\u00e9rieures \u00e0 3.0.10",
      "product": {
        "name": "Service Gateway",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique qu\u0027il est n\u00e9cessaire de le contacter pour obtenir le correctif li\u00e9 au produit Deep Discovery Inspector. ",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-6387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6387"
    }
  ],
  "initial_release_date": "2024-08-05T00:00:00",
  "last_revision_date": "2024-08-05T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0651",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-08-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Trend Micro. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000298580",
      "url": "https://success.trendmicro.com/dcx/s/solution/000298580?language=en_US"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Security Agent versions 20.0.x ant\u00e9rieures \u00e0 20.0.1-9400 pour Windows ",
      "product": {
        "name": "Deep Security Agent",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "IWSVA versions 6.5 ant\u00e9rieures \u00e0 6.5 SP3 Patch 2 (b3367)",
      "product": {
        "name": "IWSVA",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions 2019 ant\u00e9rieures \u00e0 SP1 CP b12980",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-36304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36304"
    },
    {
      "name": "CVE-2024-36359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36359"
    },
    {
      "name": "CVE-2024-36307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36307"
    },
    {
      "name": "CVE-2024-36306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36306"
    },
    {
      "name": "CVE-2024-36302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36302"
    },
    {
      "name": "CVE-2024-36358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36358"
    },
    {
      "name": "CVE-2024-36305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36305"
    },
    {
      "name": "CVE-2024-36303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36303"
    }
  ],
  "initial_release_date": "2024-05-31T00:00:00",
  "last_revision_date": "2024-05-31T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0455",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-05-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend Micro. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": "2024-05-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000298151",
      "url": "https://success.trendmicro.com/dcx/s/solution/000298151?language=en_US"
    },
    {
      "published_at": "2024-05-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000298065",
      "url": "https://success.trendmicro.com/dcx/s/solution/000298065?language=en_US"
    },
    {
      "published_at": "2024-05-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000298063",
      "url": "https://success.trendmicro.com/dcx/s/solution/000298063?language=en_US"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Deep Security Agent pour Windows versions 20.0.x ant\u00e9rieures \u00e0 20.0.0-8438",
      "product": {
        "name": "Deep Security Agent",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-52337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52337"
    },
    {
      "name": "CVE-2023-52338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52338"
    }
  ],
  "initial_release_date": "2024-01-17T00:00:00",
  "last_revision_date": "2024-01-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0043",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-01-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Deep\nSecurity Agent. Elles permettent \u00e0 un attaquant de provoquer une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Deep Security Agent",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000296337 du 16 janvier 2024",
      "url": "https://success.trendmicro.com/dcx/s/solution/000296337"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex Central 2019 sans le correctif de s\u00e9curit\u00e9 Patch 8 (b6658)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One 2019 sans le correctif de s\u00e9curit\u00e9 SP1 CP b12534",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-52094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52094"
    },
    {
      "name": "CVE-2023-52090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52090"
    },
    {
      "name": "CVE-2023-52091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52091"
    },
    {
      "name": "CVE-2023-52093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52093"
    },
    {
      "name": "CVE-2023-52324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52324"
    },
    {
      "name": "CVE-2023-52092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52092"
    },
    {
      "name": "CVE-2023-52326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52326"
    },
    {
      "name": "CVE-2023-52325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52325"
    },
    {
      "name": "CVE-2023-52328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52328"
    }
  ],
  "initial_release_date": "2024-01-10T00:00:00",
  "last_revision_date": "2024-01-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0016",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-01-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Trend\nMicro. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Trend Micro",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000296153 du 09 janvier 2024",
      "url": "https://success.trendmicro.com/dcx/s/solution/000296153"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000296151 du 09 janvier 2024",
      "url": "https://success.trendmicro.com/dcx/s/solution/000296151"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "TrendMicro Apex One as a Service toutes versions sans le correctif de s\u00e9curit\u00e9 mensuel de septembre 2023",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "TrendMicro Apex One (On-prem) versions 2019 sans le correctif de s\u00e9curit\u00e9 SP1 CP 12526",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-47195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47195"
    },
    {
      "name": "CVE-2023-47194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47194"
    },
    {
      "name": "CVE-2023-47199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47199"
    },
    {
      "name": "CVE-2023-47198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47198"
    },
    {
      "name": "CVE-2023-47200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47200"
    },
    {
      "name": "CVE-2023-47201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47201"
    },
    {
      "name": "CVE-2023-47202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47202"
    },
    {
      "name": "CVE-2023-47192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47192"
    },
    {
      "name": "CVE-2023-47197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47197"
    },
    {
      "name": "CVE-2023-47193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47193"
    },
    {
      "name": "CVE-2023-47196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47196"
    }
  ],
  "initial_release_date": "2023-11-07T00:00:00",
  "last_revision_date": "2023-11-07T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro\u00a0000295652 du 06 novembre 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000295652"
    }
  ],
  "reference": "CERTFR-2023-AVI-0918",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-11-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans\u003cspan\nclass=\"textit\"\u003e\u00a0TrendMicro Apex One\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TrendMicro Apex One",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000295652 du 06 novembre 2023",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "TrendMicro Worry-Free Business Security en mode SaaS (WFBSS) sans le correctif mensuel de maintenance du 31 juillet 2023",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "TrendMicro Apex One versions 2019 (On-prem) sans le correctif de s\u00e9curit\u00e9 SP1 Patch 1 (B12380)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "TrendMicro Apex One en mode SaaS sans le correctif mensuel de s\u00e9curit\u00e9 du mois de juillet 2023 (202307)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "TrendMicro Worry-Free Business Security (WFBS) version 10.0 SP1 sans le correctif de s\u00e9curit\u00e9 SP1 Patch 2495",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-41179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-41179"
    }
  ],
  "initial_release_date": "2023-09-20T00:00:00",
  "last_revision_date": "2023-09-20T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro\u00a0000294994 du 19 septembre 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US"
    }
  ],
  "reference": "CERTFR-2023-AVI-0764",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-09-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan class=\"textit\"\u003eles\nproduits TrendMicro\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits TrendMicro",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000294994 du 19 septembre 2023",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "TrendMicro Deep Discovery Inspector (DDI) versions 5.7 et sup\u00e9rieures, ant\u00e9rieures \u00e0 6.5 CP 1166 ou 6.6 CP 1080",
      "product": {
        "name": "Deep Discovery Inspector",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-3823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3823"
    },
    {
      "name": "CVE-2023-3824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3824"
    }
  ],
  "initial_release_date": "2023-09-18T00:00:00",
  "last_revision_date": "2023-09-18T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro\u00a0000294707 du 15 septembre 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000294707?language=en_US"
    }
  ],
  "reference": "CERTFR-2023-AVI-0756",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-09-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couverte dans TrendMicro Deep\nDiscovery Inspector. Elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TrendMicro Deep Discovery Inspector",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000294707 du 15 septembre 2023",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One as a Service sans le correctif Hotfix Build 202305 (Agent 14.0.12518)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions 2019 (On-prem) sans le correctif de s\u00e9curit\u00e9 SP1 CP B12033",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-34145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34145"
    },
    {
      "name": "CVE-2023-34146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34146"
    },
    {
      "name": "CVE-2023-34148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34148"
    },
    {
      "name": "CVE-2023-34147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34147"
    },
    {
      "name": "CVE-2023-34144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34144"
    }
  ],
  "initial_release_date": "2023-06-07T00:00:00",
  "last_revision_date": "2023-06-07T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro\u00a0000293322 du 06 juin 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US"
    }
  ],
  "reference": "CERTFR-2023-AVI-0439",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-06-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Trend Micro Apex\nOne. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de\nprivil\u00e8ges et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Trend Micro Apex One",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000293322 du 06 juin 2023",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One version 2019 sans le correctif de s\u00e9curit\u00e9 SP1 Critical Patch B120",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex Central version 2019 sans le correctif de s\u00e9curit\u00e9 Patch 4 (B6394)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service versions ant\u00e9rieures \u00e0 la maintenance d\u0027avril 2023",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-32537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32537"
    },
    {
      "name": "CVE-2023-32553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32553"
    },
    {
      "name": "CVE-2023-32557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32557"
    },
    {
      "name": "CVE-2023-32535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32535"
    },
    {
      "name": "CVE-2023-32536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32536"
    },
    {
      "name": "CVE-2023-32554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32554"
    },
    {
      "name": "CVE-2023-32556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32556"
    },
    {
      "name": "CVE-2023-30902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30902"
    },
    {
      "name": "CVE-2023-32529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32529"
    },
    {
      "name": "CVE-2023-32555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32555"
    },
    {
      "name": "CVE-2023-32605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32605"
    },
    {
      "name": "CVE-2023-32552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32552"
    },
    {
      "name": "CVE-2023-32531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32531"
    },
    {
      "name": "CVE-2023-32530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32530"
    },
    {
      "name": "CVE-2023-32604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32604"
    }
  ],
  "initial_release_date": "2023-05-17T00:00:00",
  "last_revision_date": "2023-05-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0387",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-05-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans TrendMicro Apex One\net Apex Central. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement\nde la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TrendMicro Apex One et Apex Central",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000293107 du 16 mai 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000293108 du 16 mai 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One 2019 sans le correctif de s\u00e9curit\u00e9 SP1 b11564",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Worry-Free Business Security 10.0 SP1 sans le correctif de s\u00e9curit\u00e9 Patch 2454",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service sans le correctif de s\u00e9curit\u00e9 Build 202301 Security Agent version: 14.0.11960",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Worry-Free Business Security Services sans le correctif de s\u00e9curit\u00e9 (6.7.3064 / 14.2.3044)",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-25143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25143"
    },
    {
      "name": "CVE-2022-44649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44649"
    },
    {
      "name": "CVE-2023-25146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25146"
    },
    {
      "name": "CVE-2023-25144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25144"
    },
    {
      "name": "CVE-2023-0587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0587"
    },
    {
      "name": "CVE-2022-44650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44650"
    },
    {
      "name": "CVE-2022-45798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45798"
    },
    {
      "name": "CVE-2023-25148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25148"
    },
    {
      "name": "CVE-2023-25145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25145"
    },
    {
      "name": "CVE-2023-25147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25147"
    }
  ],
  "initial_release_date": "2023-02-09T00:00:00",
  "last_revision_date": "2023-02-09T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000292209 du 09 f\u00e9vrier 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000292209?language=en_US"
    }
  ],
  "reference": "CERTFR-2023-AVI-0106",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eTrendMicro\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un contournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de\nprivil\u00e8ges et une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits TrendMicro",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000292209 du 08 f\u00e9vrier 2023",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000292202 du 08 f\u00e9vrier 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000292202?language=en_US"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One versions 2019 Server Build 11110 sans le correctif de s\u00e9curit\u00e9 Service Pack SP1 b11564",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One as a Service versions ant\u00e9rieures \u00e0 January 2023 Maintenance Hotfix - Build 202301 Security Agent 14.0.11960",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-0587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0587"
    }
  ],
  "initial_release_date": "2023-02-02T00:00:00",
  "last_revision_date": "2023-02-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0082",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Trend Micro Apex One. Elle\npermet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Trend Micro Apex One",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Trend Micro 000292183 du 01 f\u00e9vrier 2023",
      "url": "https://success.trendmicro.com/dcx/s/solution/000292183"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One as a Service sans le correctif Hotfix Build 202211 (Agent 14.0.11840)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions 2019 (On-prem) sans le correctif SP1 CP b11136 (Agent 11136)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-45797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45797"
    },
    {
      "name": "CVE-2022-45798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45798"
    }
  ],
  "initial_release_date": "2022-12-02T00:00:00",
  "last_revision_date": "2022-12-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-1072",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-12-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans TrendMicro Apex\nOne. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TrendMicro Apex One",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro 000291830 du 01 d\u00e9cembre 2022",
      "url": "https://success.trendmicro.com/dcx/s/solution/000291830"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Apex One as a Service versions sans le correctif de s\u00e9curit\u00e9 de otctobre 2022 (version de l\u0027agent de s\u00e9curit\u00e9 : 14.0.11789)",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    },
    {
      "description": "Apex One versions 2019 (On-prem) sans le correctif de s\u00e9curit\u00e9 SP1 b11128",
      "product": {
        "name": "Apex One",
        "vendor": {
          "name": "Trend Micro",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-44649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44649"
    },
    {
      "name": "CVE-2022-44654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44654"
    },
    {
      "name": "CVE-2022-44652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44652"
    },
    {
      "name": "CVE-2022-44651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44651"
    },
    {
      "name": "CVE-2022-44647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44647"
    },
    {
      "name": "CVE-2022-44653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44653"
    },
    {
      "name": "CVE-2022-44648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44648"
    },
    {
      "name": "CVE-2022-44650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-44650"
    }
  ],
  "initial_release_date": "2022-11-10T00:00:00",
  "last_revision_date": "2022-11-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-1021",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-11-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans TrendMicro Apex\nOne. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es\net une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TrendMicro Apex One",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 TrendMicro du 09 novembre 2022",
      "url": "https://success.trendmicro.com/dcx/s/solution/000291770"
    }
  ]
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:43.934Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://success.trendmicro.com/solution/000291645"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1400/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Trend Micro Apex One",
          "vendor": "Trend Micro",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (on-prem) and SaaS"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Origin Validation Error",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-10T00:00:00.000Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/solution/000291645"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1400/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2022-41749",
    "datePublished": "2022-10-10T00:00:00.000Z",
    "dateReserved": "2022-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T12:49:43.934Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:44.167Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://success.trendmicro.com/solution/000291645"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Trend Micro Apex One",
          "vendor": "Trend Micro",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (on-prem) and SaaS"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative credentials to bypass certain elements of the product\u0027s anti-tampering mechanisms on affected installations. Please note: an attacker must first obtain administrative credentials on the target system in order to exploit this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Registry Permissions",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-10T00:00:00.000Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/solution/000291645"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2022-41748",
    "datePublished": "2022-10-10T00:00:00.000Z",
    "dateReserved": "2022-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T12:49:44.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:43.590Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://success.trendmicro.com/solution/000291645"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1402/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Trend Micro Apex One",
          "vendor": "Trend Micro",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (on-prem) and SaaS"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Certification Validation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-10T00:00:00.000Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/solution/000291645"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1402/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2022-41747",
    "datePublished": "2022-10-10T00:00:00.000Z",
    "dateReserved": "2022-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T12:49:43.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:43.755Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://success.trendmicro.com/solution/000291645"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1403/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Trend Micro Apex One",
          "vendor": "Trend Micro",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (on-prem) and SaaS"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privileges and modify certain agent groupings. Please note: an attacker must first obtain the ability to log onto the Apex One web console in order to exploit this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Forced Browsing LPE",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-10T00:00:00.000Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/solution/000291645"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1403/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2022-41746",
    "datePublished": "2022-10-10T00:00:00.000Z",
    "dateReserved": "2022-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T12:49:43.755Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:49:43.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://success.trendmicro.com/solution/000291645"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1401/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Trend Micro Apex One",
          "vendor": "Trend Micro",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (on-prem) and SaaS"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "OOB Access",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-10T00:00:00.000Z",
        "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
        "shortName": "trendmicro"
      },
      "references": [
        {
          "url": "https://success.trendmicro.com/solution/000291645"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1401/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
    "assignerShortName": "trendmicro",
    "cveId": "CVE-2022-41745",
    "datePublished": "2022-10-10T00:00:00.000Z",
    "dateReserved": "2022-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-03T12:49:43.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}