CVE-2025-49155CWE-427

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to…

High · published June 17, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00915 · 59.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-06-17T18:42Z
EPSS history
Timeline
  • 17 JUN 18:42Z
    An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to…
    cvelistv5