[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVq3kFinm2EwTIwXKIOsiKicpjeR4Ee7L4kb6ejTYzGA":3,"g5a-risk:CVE-2022-40139":127},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":49,"references":50,"referencesCount":59,"weaknesses":60,"weaknessesCount":64,"isActivelyExploited":4,"cisaInfo":65,"otxData":26,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":108,"notableEvents":109},"CVE-2022-40139","What is CVE-2022-40139?","Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.","Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Ape...","2022-09-19T18:15:09.96","2025-02-12T20:44:10.163",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED",null,1.2,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.03291,[33,33,33,33,33,33,33],"High",[37,42,45],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"trendmicro","apex_one","-","cpe:2.3:a:trendmicro:apex_one:-:*:*:*:saas:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"2019","cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":40,"criteria":48,"vulnerable":4},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",3,[51,57],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fsolution\u002F000291528","Trendmicro",[55,56],"Patch","Vendor Advisory",{"url":52,"source":53,"tags":58},[55,56],2,[61],{"id":62,"name":62,"description":63},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":66,"requiredAction":66,"vulnerabilityName":66,"dateAdded":26},"",[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2022-40139? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-40139, a high severity cyber security vulnerability from 2022. Improper validation of some components used by the rollback...","CVE-2022-40139, CVE-2022-40139 vulnerability, CVE-2022-40139 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, trendmicro security, microsoft security, apex_one vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2022-40139",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-40139","Cybersecurity","CVE-2022-40139, CVE-2022-40139 vulnerability, CVE-2022-40139 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":95,"Negate":26,"Nodes":96},"AND",[97,104],{"Operator":98,"Negate":26,"CPEMatch":99},"OR",[100,102],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":101,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"97D177B6-2542-4D3D-873D-0243DEE3F0A0",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":103,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AF019D2D-C426-4D2D-A254-442CE777B41E",{"Operator":98,"Negate":26,"CPEMatch":105},[106],{"Vulnerable":26,"Criteria":48,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[110,117],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"6893c4d7-0af4-477c-a960-701a21236fb8","HIGH_EPSS_DELTA","2025-11-19T04:05:33.704178+00:00","Daily EPSS score increased by 0.199 on 2023-12-30","EPSS Score Increased","red",{"id":118,"eventType":119,"eventTime":120,"details":121,"label":122,"color":123},"f9b5b961-d8f6-4428-be22-e45f1e85b20e","LOW_EPSS_DELTA","2025-11-22T04:05:22.357273+00:00","Daily EPSS score decreased by 0.199 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":125,"version":126},1792284944832,"2.0",{"score":128,"band":35,"action":129,"scoredAt":130},71,"Emergency patch","2026-10-16T06:55:44.210613+00:00"]