CyberzSOC

Applicability
← Back to CVE-2023-41179

CVE-2023-41179

CVSS 7.2 In CISA KEV Trend Micro

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

CVE List v5 (CNA container)
precedence 60 · revised 2025-10-21
4 affected
CVE List v5 (ADP/Vulnrichment)
precedence 55 · revised 2025-10-21
3 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (7)

Product Status Versions Remediation Source
Trend Micro, Inc./Trend Micro Apex One Trend Micro, Inc. · Trend Micro Apex One affected >= 2019 (14.0), < 14.0.0.12380 none available cve_cna
Trend Micro, Inc./Trend Micro Apex One Trend Micro, Inc. · Trend Micro Apex One affected >= SaaS, < 14.0.12637 none available cve_cna
Trend Micro, Inc./Trend Micro Worry-Free Business Security Trend Micro, Inc. · Trend Micro Worry-Free Business Security affected >= 10.0 SP1, < 10.0 SP1 Build 2495 none available cve_cna
Trend Micro, Inc./Trend Micro Worry-Free Business Security Services Trend Micro, Inc. · Trend Micro Worry-Free Business Security Services affected >= SaaS, < 6.7.3578 / 14.3.1105 none available cve_cna
trendmicro/apex_one trendmicro · apex_one affected 2019 none available cve_adp
trendmicro/worry-free_business_security trendmicro · worry-free_business_security affected 10.0 none available cve_adp
trendmicro/worry-free_business_security_services trendmicro · worry-free_business_security_services affected no version stated vendor label: all versions none available cve_adp

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.