CVE-2022-40139 — Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

CISA KEVExploited: confirmedTrend Micro

Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

Vulnerability details

Affected productsApex One and Apex One as a Service
KEV remediation due2022-10-06