Skip to content
OpenAdvisories

Vendor

Trellix

58 known vulnerabilities.

Products

Trellix Agent 6 Intrusion Prevention System (IPS) Manager 4 ePolicy Orchestrator 4 DLP on-prem extensions 3 Trellix Enterprise Security Manager (ESM) 3 System Information Reporter 3 Trellix ePolicy Orchestrator (ePO) 2 Trellix Agent (TA) 2 Enterprise Security Manager 2 Trellix HX Console 2 DLP Extension 2 Endpoint Security HX 1 DXL Broker 1 Data Loss Prevention (DLP) 1 xAgent 1 Data Loss Prevention Endpoint for Windows 1 Trellix Endpoint Security (ENS) Web Control 1 Trellix Central Management (CM) 1 Application and Change Control 1 Endpoint HX Agent (xAgent) 1 Trellix Network Security NX, EX, FX, AX, and CMS 1 Trellix IPS Manager 1 Trellix Move 1 ESM 1 Trellix Application and Change Control (TACC) 1 Trellix NX, EX, AX, FX, CMS and IVX 1 Trellix EDR UI (XConsole) 1 Anti-Malware Engine 1 GetSusp 1 FireEye EDR HX 1 Trellix EPO 1 ePO Onprem Sp1 Update4 1 Trellix Endpoint Security 1 Trellix Intelligent Sandbox 1 DLP Endpoint for Windows 1 Trellix Endpoint Security (HX) Agent 1 Endpoint Security < 10.7.0 Update 15 0 ePolicy Orchestrator < 5.10.0 SP1 UP2 0 Agent < 5.7.9 0 Data Loss Prevention < 11.10.0 0
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • High 8.1
    CVE-2023-3314

    A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutral…

    Trellix Enterprise Security Manager
  • High 7.8
    CVE-2023-3313

    An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special element…

    Trellix Enterprise Security Manager
  • Medium 4.4
    CVE-2023-3438

    An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install servic…

    Trellix Trellix Move
  • Medium 6.3
    CVE-2023-0976

    A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file…

    Trellix Trellix Agent
  • Medium 6.3
    CVE-2023-1388

    A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the mac…

    Trellix Trellix Agent
  • Medium 6.7
    CVE-2023-0977

    A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote use…

    Trellix Trellix Agent
  • High 8.2
    CVE-2023-0975

    A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/…

    Trellix Trellix Agent
  • Medium 6.4
    CVE-2023-0978

    A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user t…

    Trellix Trellix Intelligent Sandbox
  • Medium 5.9
    CVE-2023-0400 Public exploit

    The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local use…

    Trellix Data Loss Prevention (DLP)
  • Medium 4.4
    CVE-2023-0221

    Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administra…

    Trellix Application and Change Control
  • Medium 5.5
    CVE-2022-4326

    Trellix xAgent permission bypass vulnerability

    Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions i…

    Trellix xAgent
  • Medium 6.7
    CVE-2022-3859

    An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This all…

    Trellix Trellix Agent
  • Medium 6.5
    CVE-2022-2188

    DXL Broker privilege escalation vulnerability

    Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

    Trellix DXL Broker
  • Medium 5.9
    CVE-2022-3340

    Trellix IPS Manager vulnerable to XXE

    XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

    Trellix Trellix IPS Manager
  • Medium 5.4
    CVE-2022-3339

    Reflected XSS in Trellix ePO server

    A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a careful…

    Trellix Trellix ePolicy Orchestrator (ePO)
  • Medium 5.4
    CVE-2022-3338

    XXE in Trellix ePO server

    An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing …

    Trellix Trellix ePolicy Orchestrator (ePO)
  • Medium 6.5
    CVE-2022-2330

    XXE vulnerability in DLP Endpoint for Windows

    Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully const…

    Trellix DLP Endpoint for Windows Windows
  • High 8.2
    CVE-2022-2313

    DLL high jacking in Trellix Agent

    A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is bein…

    Trellix Trellix Agent (TA)