CVE-2025-31283: High severity Trend Micro Vision One vulnerability
A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31283?
CVE-2025-31283 has been classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-31283?
To fix CVE-2025-31283, ensure that you have applied the latest updates provided by Trend Micro for the Vision One User Roles component.
Who is affected by CVE-2025-31283?
CVE-2025-31283 affects users of Trend Micro Vision One who manage user roles and permissions.
What can happen if CVE-2025-31283 is exploited?
If exploited, CVE-2025-31283 could allow unauthorized users to escalate their privileges and gain access to sensitive functions.
When was CVE-2025-31283 disclosed?
CVE-2025-31283 was disclosed in 2025, detailing a broken access control issue within the Trend Vision One User Roles component.