Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Trellix ePolicy Orchestrator (ePO) 5.10 Update 14 Clear all filters
TI-2022-03086 CVE-2022-3339 · GHSA-p364-wcw9-g7q4

Reflected XSS in Trellix ePO server

Priority LOW 29

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00803 Published 2022-10-18 Fixed in 5.10 Update 14 CWE-79
TI-2022-03085 CVE-2022-3338 · GHSA-g436-fj5g-4gw9

XXE in Trellix ePO server

Priority LOW 25

An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00578 Published 2022-10-18 Fixed in 5.10 Update 14 CWE-611