İçeriğe atla
Noroxi

Trellix kayıtları

trellix üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%2,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

34 kayıt
  • CVE-2024-11482
    40Planlayın

    A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through comma

    KritikCVSS 9,8İstismar yokEPSS %3

    trellix · enterprise security manager29 Kas 2024

  • CVE-2024-5671
    39İzleyin

    Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution an

    KritikCVSS 9,8İstismar yokEPSS %1

    trellix · intrusion prevention system (ips) manager14 Haz 2024

  • CVE-2023-3314
    35İzleyin

    A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s).

    YüksekCVSS 8,8İstismar yokEPSS %1

    trellix · enterprise security manager3 Tem 2023

  • CVE-2023-1388
    32İzleyin

    A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory

    YüksekCVSS 8,1İstismar yokEPSS %1

    trellix · agent7 Haz 2023

  • CVE-2024-11481
    32İzleyin

    A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API.

    YüksekCVSS 8,2İstismar yokEPSS %0

    trellix · enterprise security manager29 Kas 2024

  • CVE-2023-0400
    32İzleyin

    The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0.

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    trellix · data loss prevention2 Şub 2023

  • CVE-2023-0976
    31İzleyin

    A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/T

    YüksekCVSS 7,8İstismar yokEPSS %1

    trellix · agent7 Haz 2023

  • CVE-2023-3313
    31İzleyin

    An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed a

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · enterprise security manager3 Tem 2023

  • CVE-2023-3438
    31İzleyin

    An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe).

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · move3 Tem 2023

  • CVE-2023-3665
    31İzleyin

    A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · endpoint security4 Eki 2023

  • CVE-2023-6119
    31İzleyin

    An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · getsusp16 Kas 2023

  • CVE-2024-0206
    31İzleyin

    A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local u

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · anti-malware engine9 Oca 2024

  • CVE-2024-0213
    31İzleyin

    A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · agent9 Oca 2024

  • CVE-2023-0975
    31İzleyin

    A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to

    YüksekCVSS 7,8İstismar yokEPSS %0

    trellix · agent3 Nis 2023

  • CVE-2024-5957
    30İzleyin

    This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

    YüksekCVSS 7,5İstismar yokEPSS %0

    trellix · intrusion prevention system manager5 Eyl 2024

  • CVE-2024-4844
    30İzleyin

    Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacke

    YüksekCVSS 7,5İstismar yokEPSS %0

    trellix · epolicy orchestrator16 May 2024

  • CVE-2023-5607
    28İzleyin

    An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises e

    YüksekCVSS 7,2İstismar yokEPSS %1

    trellix · application and change control27 Kas 2023

  • CVE-2023-6071
    28İzleyin

    An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator

    YüksekCVSS 7,2İstismar yokEPSS %1

    trellix · enterprise security manager30 Kas 2023

  • CVE-2022-3340
    28İzleyin

    Trellix IPS Manager vulnerable to XXE

    YüksekCVSS 7,2İstismar yokEPSS %1

    trellix · intrusion prevention system manager4 Kas 2022

  • CVE-2025-3771
    28İzleyin

    A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite

    YüksekCVSS 7,2İstismar yokEPSS %0

    trellix · system information reporter26 Haz 2025

  • CVE-2023-4814
    28İzleyin

    A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for w

    YüksekCVSS 7,1İstismar yokEPSS %0

    trellix · data loss prevention14 Eyl 2023

  • CVE-2023-0977
    26İzleyin

    A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page

    OrtaCVSS 6,5İstismar yokEPSS %1

    trellix · agent3 Nis 2023

  • CVE-2023-0978
    26İzleyin

    A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute

    OrtaCVSS 6,7İstismar yokEPSS %0

    trellix · intelligent sandbox13 Mar 2023

  • CVE-2022-3859
    26İzleyin

    An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8.

    OrtaCVSS 6,7İstismar yokEPSS %0

    trellix · agent30 Kas 2022

  • CVE-2023-0214
    25İzleyin

    XSS in Skyhigh Security SWG

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    trellix · skyhigh secure web gateway18 Oca 2023