Paper/Archive/CVE-2025-47867

CVE-2025-47867

Trend Micro, Inc. Trend Micro Apex Central — A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include a…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 80.2.802 × 2016.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.

Affected

ProductAffectedFixed inSource

Trend Micro Apex Central8.0 – < 8.0.69558.0.6955CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

trendmicro (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsuccess.trendmicro.com/en-US/solution/KA-0019355 refzerodayinitiative.com/advisories/ZDI-25-297