Description
Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.
NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.
Scoring
- CVSS: Not yet available
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2022-09-15
- Remediation due date: 2022-10-06
- Known ransomware campaign use: Unknown
More from Trend Micro
- CVE-2026-34926 — Apex One
- CVE-2025-54948 — Apex One
- CVE-2023-41179 — Apex One and Worry-Free Business Security
- CVE-2022-26871 — Apex Central
- CVE-2019-18187 — OfficeScan