Vulnerability Database

314,494

Total vulnerabilities in the database

CVE-2024-36307

A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

  • Published: Jun 10, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-36307
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
trendmicro / apex_one 14.0 14.0.0.12980.x
trendmicro / apex_one - 14.0.13139.x