What is CVE-2025-49155?

CVE-2025-49155 is a high-severity vulnerability in Trendmicro Apex_one, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2025-06-17.

How severe is CVE-2025-49155?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Trendmicro Apex_one

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Trendmicro Apex_one
Trend Micro, Inc. Micro Apex One — versions 2019 (14.0)
Trend Micro, Inc. Micro Apex One As A Service — versions SaaS

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

security@trendmicro.com (Vendor Advisory)
security@trendmicro.com (Third Party Advisory)

Frequently asked questions

What is CVE-2025-49155?: CVE-2025-49155 is a high-severity vulnerability in Trendmicro Apex_one, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2025-06-17.
How severe is CVE-2025-49155?: High severity. CVSS v3 base score is 8.8 out of 10.