Vendor
Trellix
58 known vulnerabilities.
Trellix at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 3 | 0 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 1 | 0 |
| Jun 2026 | 1 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 1 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 3 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 3 | 0 |
Products
Trellix Agent 6
Intrusion Prevention System (IPS) Manager 4
ePolicy Orchestrator 4
DLP on-prem extensions 3
Trellix Enterprise Security Manager (ESM) 3
System Information Reporter 3
Trellix ePolicy Orchestrator (ePO) 2
Trellix Agent (TA) 2
Enterprise Security Manager 2
Trellix HX Console 2
DLP Extension 2
Endpoint Security HX 1
DXL Broker 1
Data Loss Prevention (DLP) 1
xAgent 1
Data Loss Prevention Endpoint for Windows 1
Trellix Endpoint Security (ENS) Web Control 1
Trellix Central Management (CM) 1
Application and Change Control 1
Endpoint HX Agent (xAgent) 1
Trellix Network Security NX, EX, FX, AX, and CMS 1
Trellix IPS Manager 1
Trellix Move 1
ESM 1
Trellix Application and Change Control (TACC) 1
Trellix NX, EX, AX, FX, CMS and IVX 1
Trellix EDR UI (XConsole) 1
Anti-Malware Engine 1
GetSusp 1
FireEye EDR HX 1
Trellix EPO 1
ePO Onprem Sp1 Update4 1
Trellix Endpoint Security 1
Trellix Intelligent Sandbox 1
DLP Endpoint for Windows 1
Trellix Endpoint Security (HX) Agent 1
Endpoint Security < 10.7.0 Update 15 0
ePolicy Orchestrator < 5.10.0 SP1 UP2 0
Agent < 5.7.9 0
Data Loss Prevention < 11.10.0 0
Latest advisories
-
Medium max 8.8
cURL: Mehre Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in cURL und libcurl ausnutzen, um einen nicht näher spezifizierten Angriff zu starten.
first Oct 4, 2023 -
Medium max 9.8
Apache Tomcat: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen, oder Sicherheitsvorkehrungen zu umgehen.
first Apr 28, 2025 -
High max 9.8
Apache Portable Runtime (APR): Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
first Jan 31, 2023 -
Medium max 4.3
Apache Commons IO: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons IO ausnutzen, um einen Denial of Service Angriff durchzuführen.
first Oct 3, 2024 -
High max 7.5
Apache Tomcat: Mehrere Schwachstellen
Ein lokaler oder entfernter Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.
first Jul 12, 2021
58 results · Feed
-
Medium 5.3
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the f…
-
Medium 6.0
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a re…
-
High 7.1
SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacke…
-
Medium 6.9
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decrypt…
-
Medium 6.0
An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The …
-
High 7.1
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can ex…
-
Medium 6.2
A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the abi…
-
Medium 6.7
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agen…
-
Medium 5.3
A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the …
-
None 0.0
A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authentic…
-
None 0.0
A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privi…
-
High 7.2
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin lo…
-
Medium 6.5
A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a spe…
-
Medium 5.9
An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The m…
-
Medium 5.4
Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a r…
-
Medium 5.3
A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previous…
-
Medium 4.9
An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arb…
-
Critical 9.8
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code ex…
-
High 8.2
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper ha…
-
Medium 6.3
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
-
Medium 6.5
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the…
-
Medium 5.9
An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
-
Medium 6.8
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to con…
-
Critical 9.8
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitr…
-
Medium 4.1
An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially levera…
-
High 7.5
Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Updat…
-
Medium 4.3
ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allo…
-
Medium 4.6
A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authentica…
-
Medium 6.1
A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote atta…
-
High 8.2
A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated pe…
-
High 7.1
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an a…
-
High 8.4
An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a …
-
Medium 4.3
A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user t…
-
High 8.4
An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extensio…
-
Medium 5.4
An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged use…
-
High 8.0
CSRF in ePO leading to privilege escalation
A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server. This impacts the dashboard area of the user inte…
-
Medium 6.5
An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privile…
-
Medium 5.5
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable th…
-
High 7.1
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete a…
-
Medium 5.4
A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated a…