Vendor
Trellix
58 known vulnerabilities.
Products
39 results · Clear filters · Feed
-
Medium 5.3
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the f…
-
Medium 6.0
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a re…
-
Medium 6.9
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decrypt…
-
Medium 6.0
An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The …
-
Medium 6.2
A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the abi…
-
Medium 6.7
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agen…
-
Medium 5.3
A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the …
-
Medium 6.5
A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a spe…
-
Medium 5.9
An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The m…
-
Medium 5.4
Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a r…
-
Medium 5.3
A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previous…
-
Medium 4.9
An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arb…
-
Medium 6.3
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
-
Medium 6.5
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the…
-
Medium 5.9
An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
-
Medium 6.8
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to con…
-
Medium 4.1
An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially levera…
-
Medium 4.3
ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allo…
-
Medium 4.6
A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authentica…
-
Medium 6.1
A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote atta…
-
Medium 4.3
A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user t…
-
Medium 5.4
An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged use…
-
Medium 6.5
An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privile…
-
Medium 5.5
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable th…
-
Medium 5.4
A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated a…
-
Medium 4.4
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install servic…
-
Medium 6.3
A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file…
-
Medium 6.3
A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the mac…
-
Medium 6.7
A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote use…
-
Medium 6.4
A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user t…
-
Medium 5.9CVE-2023-0400 Public exploit
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local use…
-
Medium 4.4
Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administra…
-
Medium 5.5
Trellix xAgent permission bypass vulnerability
Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions i…
-
Medium 6.7
An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This all…
-
Medium 6.5
DXL Broker privilege escalation vulnerability
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
-
Medium 5.9
Trellix IPS Manager vulnerable to XXE
XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.
-
Medium 5.4
Reflected XSS in Trellix ePO server
A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a careful…
-
Medium 5.4
XXE in Trellix ePO server
An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing …
-
Medium 6.5
XXE vulnerability in DLP Endpoint for Windows
Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully const…