Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Trellix Component: Intrusion Prevention System Manager Clear all filters
TI-2024-05519 CVE-2024-5956 · GHSA-mg2f-g382-vvc6

Authentication bypass in Trellix Intrusion Prevention System Manager

Priority LOW 35

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00389 Published 2024-09-05 No fix listed CWE-305
TI-2022-03087 CVE-2022-3340 · GHSA-r5fq-3rw7-9rmp

Trellix IPS Manager vulnerable to XXE

Priority LOW 33

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00653 Published 2022-11-04 Fixed in 10.1 M10 CWE-611