What is the CVSS score of CVE-2025-47866?

CVE-2025-47866 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Apex Central are affected by CVE-2025-47866?

Organizations using a Trend Micro Apex Central widget below should be aware of moderate risk from CVE-2025-47866 rated CVSS 4.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-47866?

Within 30 days: Identify affected systems running a Trend Micro Apex Central widget below and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Apex Central CVE-2025-47866

EUVD-2025-18518 MEDIUM

Undefined Behavior for Input to API (CWE-475)

2025-06-17 security@trendmicro.com

File Upload Apex Central

4.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

8.0.6955

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-18518

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

CVE Published

Jun 17, 2025 - 18:15 nvd

MEDIUM 4.3

DescriptionNVD

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

Analysis

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

Technical ContextAI

Unrestricted file upload allows attackers to upload malicious files (web shells, executables) that can then be executed on the server.

RemediationAI

Validate file types by content (magic bytes), not just extension. Store uploads outside the web root. Use random filenames. Scan uploads for malware.

CVE-2025-47866 vulnerability details – vuln.today

Back

Apex Central CVE-2025-47866

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code