Skip to main content

Apex Central CVE-2025-30679

| EUVDEUVD-2025-18555 MEDIUM
Server-Side Request Forgery (SSRF) (CWE-918)
2025-06-17 security@trendmicro.com
Information Disclosure SSRF Apex Central
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

4
Patch available
Apr 16, 2026 - 05:29 EUVD
8.0.6955
EUVD ID Assigned
Mar 14, 2026 - 22:15 euvd
EUVD-2025-18555
Analysis Generated
Mar 14, 2026 - 22:15 vuln.today
CVE Published
Jun 17, 2025 - 20:15 nvd
MEDIUM 6.5

DescriptionCVE.org

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

Analysis

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations.

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.

More in Apex Central

View all
CVE-2025-69258 CRITICAL POC
9.8 Jan 08

Trend Micro Apex Central has a DLL loading vulnerability (LoadLibraryEX) that allows unauthenticated remote attackers to
CVE-2025-69259 HIGH POC
7.5 Jan 08

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create

CVE-2025-69260 HIGH POC
7.5 Jan 08

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-
CVE-2025-49220 CRITICAL
9.8 Jun 17

Critical pre-authentication remote code execution vulnerability in Trend Micro Apex Central versions below 8.0.7007, cau
CVE-2025-49219 CRITICAL
9.8 Jun 17

Pre-authentication remote code execution vulnerability stemming from insecure deserialization in Trend Micro Apex Centra
CVE-2022-26871 CRITICAL
9.8 Mar 29

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upl
CVE-2023-32530 HIGH
8.8 Jun 26

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated user
CVE-2023-32529 HIGH
8.8 Jun 26

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated user
CVE-2025-47865 HIGH
7.5 Jun 17

Local File Inclusion (LFI) vulnerability in Trend Micro Apex Central widgets that enables remote code execution (RCE) on
CVE-2025-47867 HIGH
7.5 Jun 17

Local File Inclusion (LFI) vulnerability in Trend Micro Apex Central widgets (versions below 8.0.6955) that allows authe
CVE-2025-30680 HIGH
7.1 Jun 17

Server-Side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central SaaS that allows authenticated attackers to
CVE-2025-30678 MEDIUM
6.5 Jun 17

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allo

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

View all
CVE-2021-34473 CRITICAL POC
9.1
CVE-2021-26855 CRITICAL POC
9.1
CVE-2021-21985 CRITICAL POC
9.8
CVE-2022-41040 HIGH POC
8.8
CVE-2024-21893 HIGH POC
8.2
CVE-2021-40438 CRITICAL POC
9.0
CVE-2021-21975 HIGH POC
7.5
CVE-2023-48022 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-30679 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy