Vendor
Trellix
58 known vulnerabilities.
Products
Trellix Agent 6
Intrusion Prevention System (IPS) Manager 4
ePolicy Orchestrator 4
DLP on-prem extensions 3
Trellix Enterprise Security Manager (ESM) 3
System Information Reporter 3
Trellix ePolicy Orchestrator (ePO) 2
Trellix Agent (TA) 2
Enterprise Security Manager 2
Trellix HX Console 2
DLP Extension 2
Endpoint Security HX 1
DXL Broker 1
Data Loss Prevention (DLP) 1
xAgent 1
Data Loss Prevention Endpoint for Windows 1
Trellix Endpoint Security (ENS) Web Control 1
Trellix Central Management (CM) 1
Application and Change Control 1
Endpoint HX Agent (xAgent) 1
Trellix Network Security NX, EX, FX, AX, and CMS 1
Trellix IPS Manager 1
Trellix Move 1
ESM 1
Trellix Application and Change Control (TACC) 1
Trellix NX, EX, AX, FX, CMS and IVX 1
Trellix EDR UI (XConsole) 1
Anti-Malware Engine 1
GetSusp 1
FireEye EDR HX 1
Trellix EPO 1
ePO Onprem Sp1 Update4 1
Trellix Endpoint Security 1
Trellix Intelligent Sandbox 1
DLP Endpoint for Windows 1
Trellix Endpoint Security (HX) Agent 1
Endpoint Security < 10.7.0 Update 15 0
ePolicy Orchestrator < 5.10.0 SP1 UP2 0
Agent < 5.7.9 0
Data Loss Prevention < 11.10.0 0
15 results · Clear filters · Feed
-
High 7.1
SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacke…
-
High 7.1
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can ex…
-
High 7.2
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin lo…
-
High 8.2
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper ha…
-
High 7.5
Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Updat…
-
High 8.2
A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated pe…
-
High 7.1
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an a…
-
High 8.4
An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a …
-
High 8.4
An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extensio…
-
High 8.0
CSRF in ePO leading to privilege escalation
A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server. This impacts the dashboard area of the user inte…
-
High 7.1
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete a…
-
High 8.1
A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutral…
-
High 7.8
An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special element…
-
High 8.2
A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/…
-
High 8.2
DLL high jacking in Trellix Agent
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is bein…