Read the docs

Trellix

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Trellix records in CISA KEV

No Trellix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Agent 6 records LOW Enterprise Security Manager 6 records MEDIUM Endpoint Security 3 records LOW Intrusion Prevention System Manager 3 records LOW System Information Reporter 3 records LOW Data Loss Prevention 2 records LOW Anti-malware Engine 1 record LOW Application And Change Control 1 record LOW

Records

3 records in Intrusion Prevention System Manager · all components

TI-2024-05519 CVE-2024-5956 · GHSA-mg2f-g382-vvc6

Authentication bypass in Trellix Intrusion Prevention System Manager

Priority LOW 35

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00389 Published 2024-09-05 No fix listed CWE-305
TI-2022-03087 CVE-2022-3340 · GHSA-r5fq-3rw7-9rmp

Trellix IPS Manager vulnerable to XXE

Priority LOW 33

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00653 Published 2022-11-04 Fixed in 10.1 M10 CWE-611
Open these records in search →