https://vulnogram.org/ Most recent CVEs assigned by Trellix (trellix). https://vulnogram.org/seaview/icons/trellix.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-107171 https://vulnogram.org/CVE-2026-107171 An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users. Medium Wed, 14 Oct 2026 07:11:09 GMT https://vulnogram.org/CVE-2026-12588 https://vulnogram.org/CVE-2026-12588 An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a large file that consumes an excessive amount of system resources thus caus… Medium Tue, 14 Jul 2026 12:45:10 GMT https://vulnogram.org/CVE-2025-7958 https://vulnogram.org/CVE-2025-7958 A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details. High Fri, 26 Jun 2026 10:15:00 GMT https://vulnogram.org/CVE-2025-14963 https://vulnogram.org/CVE-2025-14963 A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver (BYOVD) was leveraged to gain access to… Medium Tue, 24 Feb 2026 17:11:06 GMT https://vulnogram.org/CVE-2025-0664 https://vulnogram.org/CVE-2025-0664 A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTE… Medium Mon, 21 Jul 2025 07:08:24 GMT https://vulnogram.org/CVE-2025-5967 https://vulnogram.org/CVE-2025-5967 A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data. Medium Tue, 01 Jul 2025 02:56:34 GMT https://vulnogram.org/CVE-2025-3773 https://vulnogram.org/CVE-2025-3773 A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder. Thu, 26 Jun 2025 11:11:26 GMT https://vulnogram.org/CVE-2025-3722 https://vulnogram.org/CVE-2025-3722 A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesy… Thu, 26 Jun 2025 11:08:53 GMT https://vulnogram.org/CVE-2025-3771 https://vulnogram.org/CVE-2025-3771 A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a… High Thu, 26 Jun 2025 11:05:18 GMT https://vulnogram.org/CVE-2025-0618 https://vulnogram.org/CVE-2025-0618 A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper pr… Medium Wed, 23 Apr 2025 06:15:20 GMT https://vulnogram.org/CVE-2025-0617 https://vulnogram.org/CVE-2025-0617 An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions in the consumer process thus causing a… Medium Network Exploitable Wed, 29 Jan 2025 10:08:29 GMT https://vulnogram.org/CVE-2024-5955 https://vulnogram.org/CVE-2024-5955 Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolic… Medium Fri, 20 Dec 2024 05:53:28 GMT https://vulnogram.org/CVE-2024-9679 https://vulnogram.org/CVE-2024-9679 A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials. Medium Mon, 16 Dec 2024 06:52:10 GMT https://vulnogram.org/CVE-2024-9678 https://vulnogram.org/CVE-2024-9678 An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution. Medium Mon, 16 Dec 2024 06:31:45 GMT https://vulnogram.org/CVE-2024-11482 https://vulnogram.org/CVE-2024-11482 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user. Critical Network Exploitable Fri, 29 Nov 2024 07:03:33 GMT https://vulnogram.org/CVE-2024-11481 https://vulnogram.org/CVE-2024-11481 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessi… High Network Exploitable Fri, 29 Nov 2024 07:01:44 GMT https://vulnogram.org/CVE-2024-5957 https://vulnogram.org/CVE-2024-5957 This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager. Medium Network Exploitable Thu, 05 Sep 2024 10:49:38 GMT https://vulnogram.org/CVE-2024-5956 https://vulnogram.org/CVE-2024-5956 This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly Medium Network Exploitable Thu, 05 Sep 2024 10:42:09 GMT https://vulnogram.org/CVE-2024-7608 https://vulnogram.org/CVE-2024-7608 An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal. Medium Tue, 27 Aug 2024 07:40:15 GMT https://vulnogram.org/CVE-2024-6398 https://vulnogram.org/CVE-2024-6398 An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in… Medium Network Exploitable Mon, 15 Jul 2024 08:52:24 GMT https://vulnogram.org/CVE-2024-5731 https://vulnogram.org/CVE-2024-5731 A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information. Medium Fri, 14 Jun 2024 13:57:25 GMT https://vulnogram.org/CVE-2024-5671 https://vulnogram.org/CVE-2024-5671 Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager. Critical Network Exploitable Fri, 14 Jun 2024 13:52:33 GMT https://vulnogram.org/CVE-2024-4176 https://vulnogram.org/CVE-2024-4176 An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for… Medium Thu, 13 Jun 2024 08:59:37 GMT https://vulnogram.org/CVE-2024-4844 https://vulnogram.org/CVE-2024-4844 Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO server to read the contents of the orion.keystore file, allowing them to ac… High Thu, 16 May 2024 06:19:47 GMT https://vulnogram.org/CVE-2024-4843 https://vulnogram.org/CVE-2024-4843 ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate the client task and client task assignments, hence escalating his/her privilege. Medium Network Exploitable Thu, 16 May 2024 06:04:05 GMT https://vulnogram.org/CVE-2024-0313 https://vulnogram.org/CVE-2024-0313 A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving applic… Medium Thu, 14 Mar 2024 09:11:29 GMT https://vulnogram.org/CVE-2024-0312 https://vulnogram.org/CVE-2024-0312 A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Medium Thu, 14 Mar 2024 09:08:27 GMT https://vulnogram.org/CVE-2024-0311 https://vulnogram.org/CVE-2024-0311 A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Medium Thu, 14 Mar 2024 09:06:25 GMT https://vulnogram.org/CVE-2023-6072 https://vulnogram.org/CVE-2023-6072 A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the… Medium Tue, 13 Feb 2024 09:39:54 GMT https://vulnogram.org/CVE-2024-0310 https://vulnogram.org/CVE-2024-0310 A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-only mode, allowing an attack… Medium Network Exploitable Wed, 10 Jan 2024 10:43:46 GMT https://vulnogram.org/CVE-2024-0213 https://vulnogram.org/CVE-2024-0213 A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through exploiting a memory corruption issue in the TA service, which runs as root.… High Tue, 09 Jan 2024 13:01:13 GMT https://vulnogram.org/CVE-2024-0206 https://vulnogram.org/CVE-2024-0206 A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under… High Tue, 09 Jan 2024 12:56:46 GMT https://vulnogram.org/CVE-2023-6071 https://vulnogram.org/CVE-2023-6071 An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on the ESM. This is possible as the input isn't correctly sanitized when add… High Thu, 30 Nov 2023 12:48:51 GMT https://vulnogram.org/CVE-2023-6070 https://vulnogram.org/CVE-2023-6070 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality w… Medium Wed, 29 Nov 2023 08:53:57 GMT https://vulnogram.org/CVE-2023-5607 https://vulnogram.org/CVE-2023-5607 An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code… High Mon, 27 Nov 2023 10:36:51 GMT https://vulnogram.org/CVE-2023-5445 https://vulnogram.org/CVE-2023-5445 An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL request(s) to a malicious site. This impacts the dashboard area of… Medium Fri, 17 Nov 2023 10:01:36 GMT https://vulnogram.org/CVE-2023-5444 https://vulnogram.org/CVE-2023-5444 A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server. This impacts the dashboard area of the… High Fri, 17 Nov 2023 09:47:20 GMT https://vulnogram.org/CVE-2023-6119 https://vulnogram.org/CVE-2023-6119 An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecti… Medium Thu, 16 Nov 2023 09:39:30 GMT https://vulnogram.org/CVE-2023-3665 https://vulnogram.org/CVE-2023-3665 A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code. Medium Wed, 04 Oct 2023 14:32:52 GMT https://vulnogram.org/CVE-2023-4814 https://vulnogram.org/CVE-2023-4814 A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to. High Thu, 14 Sep 2023 06:43:07 GMT https://vulnogram.org/CVE-2023-4400 https://vulnogram.org/CVE-2023-4400 A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to… Medium Wed, 13 Sep 2023 06:53:11 GMT https://vulnogram.org/CVE-2023-3267 https://vulnogram.org/CVE-2023-3267 When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vu… Critical Mon, 14 Aug 2023 04:11:06 GMT https://vulnogram.org/CVE-2023-3266 https://vulnogram.org/CVE-2023-3266 A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to… Critical Network Exploitable Mon, 14 Aug 2023 04:09:45 GMT https://vulnogram.org/CVE-2023-3265 https://vulnogram.org/CVE-2023-3265 An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user "cyberpower" by appending a non-printable character… Critical Network Exploitable Mon, 14 Aug 2023 04:08:06 GMT https://vulnogram.org/CVE-2023-3264 https://vulnogram.org/CVE-2023-3264 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can… Medium Mon, 14 Aug 2023 04:05:58 GMT https://vulnogram.org/CVE-2023-3263 https://vulnogram.org/CVE-2023-3263 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent… High Network Exploitable Mon, 14 Aug 2023 04:02:55 GMT https://vulnogram.org/CVE-2023-3262 https://vulnogram.org/CVE-2023-3262 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.A malicious agent with the ability to execute operating system commands on the device can l… Medium Mon, 14 Aug 2023 03:59:51 GMT https://vulnogram.org/CVE-2023-3261 https://vulnogram.org/CVE-2023-3261 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interac… High Network Exploitable Mon, 14 Aug 2023 03:53:59 GMT https://vulnogram.org/CVE-2023-3260 https://vulnogram.org/CVE-2023-3260 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underl… High Mon, 14 Aug 2023 03:51:52 GMT https://vulnogram.org/CVE-2023-3259 https://vulnogram.org/CVE-2023-3259 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge dat… Critical Network Exploitable Mon, 14 Aug 2023 03:49:59 GMT