Trellix vulnerabilities

Products

• Agent 6
• Enterprise Security Manager 6
• Agent 6
• Endpoint Security 4
• Epolicy Orchestrator 4
• Intrusion Prevention System (ips) Manager 4
• Intrusion Prevention System Manager 4
• Application And Change Control 3
• Dlp On-prem Extensions 3
• System Information Reporter 3
• System Information Reporter 3
• Enterprise Security Manager (esm) 3
• Data Loss Prevention 2
• Data Loss Prevention (dlp) 2
• Dlp Extension 2
• Enterprise Security Manager 2
• Agent (ta) 2
• Epolicy Orchestrator (epo) 2
• Hx Console 2

Newest

• trellix dlp on-prem extensions Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1... CVE-2026-115740 5.3 MediumNovember 5, 2026
• trellix dlp on-prem extensions Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1... CVE-2026-115739 6.0 MediumNovember 5, 2026
• trellix dlp on-prem extensions SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote... CVE-2026-115738 7.1 HighNovember 5, 2026
• trellix agent An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll... CVE-2026-107171 6.9 MediumOctober 14, 2026
• trellix hx console An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data... CVE-2026-12588 6.0 MediumJuly 14, 2026
• trellix network security nx, ex, fx, ax, and cms A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally... CVE-2025-7958 7.1 HighJune 26, 2026
• trellix endpoint hx agent (xagent), endpoint security +1 more A vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor... CVE-2025-14963 6.2 MediumFebruary 24, 2026
• trellix endpoint security (hx) agent A locally authenticated, privileged user can craft a malicious OpenSSL configuration file,... CVE-2025-0664 6.7 MediumJuly 21, 2025
• trellix endpoint security hx A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject... CVE-2025-5967 5.3 MediumJuly 1, 2025
• trellix system information reporter A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and... CVE-2025-3773 0.0 NoneJune 26, 2025
• trellix system information reporter A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an... CVE-2025-3722 0.0 NoneJune 26, 2025
• trellix system information reporter A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an... CVE-2025-3771 7.2 HighJune 26, 2025
• trellix fireeye edr hx A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR... CVE-2025-0618 6.5 MediumApril 23, 2025
• trellix hx console An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data... CVE-2025-0617 5.9 MediumJanuary 29, 2025
• trellix epo onprem sp1 update4 Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack... CVE-2024-5955 5.4 MediumDecember 20, 2024
• trellix dlp extension A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the... CVE-2024-9679 5.3 MediumDecember 16, 2024
• trellix dlp extension An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an... CVE-2024-9678 4.9 MediumDecember 16, 2024
• hp enterprise security manager, trellix enterprise security manager (esm) +1 more A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and... CVE-2024-11482 9.8 CriticalNovember 29, 2024
• trellix enterprise security manager, enterprise security manager (esm) +1 more A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API.... CVE-2024-11481 8.2 HighNovember 29, 2024
• trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 more This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs... CVE-2024-5957 6.3 MediumSeptember 5, 2024
• trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 more This vulnerability allows unauthenticated remote attackers to bypass authentication and gain... CVE-2024-5956 6.5 MediumSeptember 5, 2024
• trellix nx, ex, ax, fx, cms and ivx An authenticated user can download sensitive files from Trellix products NX, EX, FX, AX, IVX, ... CVE-2024-7608 5.9 MediumAugust 27, 2024
• trellix intrusion prevention system (ips) manager A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow... CVE-2024-5731 6.8 MediumJune 14, 2024
• trellix intrusion prevention system (ips) manager, intrusion prevention system manager +1 more Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote... CVE-2024-5671 9.8 CriticalJune 14, 2024
• trellix edr xconsole, xconsole, edr ui (xconsole) +2 more An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker... CVE-2024-4176 4.1 MediumJune 13, 2024
• trellix epolicy orchestrator Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5... CVE-2024-4844 7.5 HighMay 16, 2024
• trellix epolicy orchestrator ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct... CVE-2024-4843 4.3 MediumMay 16, 2024
• trellix central management (cm), central management system +1 more A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129... CVE-2023-6072 4.6 MediumFebruary 13, 2024
• trellix endpoint security, endpoint security web control, endpoint security (ens) web control +2 more A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update... CVE-2024-0310 6.1 MediumJanuary 10, 2024
• trellix agent, agent (ta) +1 more A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local... CVE-2024-0213 8.2 HighJanuary 9, 2024
• trellix anti-malware engine A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January... CVE-2024-0206 7.1 HighJanuary 9, 2024
• trellix esm, enterprise security manager +1 more An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to... CVE-2023-6071 8.4 HighNovember 30, 2023
• trellix enterprise security manager, enterprise security manager (esm) +1 more A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low... CVE-2023-6070 4.3 MediumNovember 29, 2023
• trellix application and change control, application and change control (tacc) +1 more An improper limitation of a path name to a restricted directory (path traversal) vulnerability... CVE-2023-5607 8.4 HighNovember 27, 2023
• mcafee epolicy orchestrator An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a... CVE-2023-5445 5.4 MediumNovember 17, 2023
• mcafee epolicy orchestrator CSRF in ePO leading to privilege escalation CVE-2023-5444 8.0 HighNovember 17, 2023
• trellix getsusp An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27... CVE-2023-6119 6.5 MediumNovember 16, 2023
• trellix endpoint security A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a... CVE-2023-3665 5.5 MediumOctober 4, 2023
• trellix data loss prevention endpoint for windows, data loss prevention +1 more A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which... CVE-2023-4814 7.1 HighSeptember 14, 2023
• trellix epo, mcafee epolicy orchestrator +1 more A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a... CVE-2023-3946 5.4 MediumJuly 26, 2023
• trellix enterprise security manager A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file... CVE-2023-3314 8.1 HighJuly 3, 2023
• trellix enterprise security manager An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly... CVE-2023-3313 7.8 HighJuly 3, 2023
• trellix move An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier... CVE-2023-3438 4.4 MediumJuly 3, 2023
• trellix agent A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter... CVE-2023-0976 6.3 MediumJune 7, 2023
• trellix agent A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter... CVE-2023-1388 6.3 MediumJune 7, 2023
• trellix agent A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and... CVE-2023-0977 6.7 MediumApril 3, 2023
• trellix agent A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local... CVE-2023-0975 8.2 HighApril 3, 2023
• trellix intelligent sandbox, mcafee advanced threat defense +1 more A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier,... CVE-2023-0978 6.4 MediumMarch 13, 2023
• trellix data loss prevention (dlp), data loss prevention +1 more The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0.... CVE-2023-0400 Public exploit 5.9 MediumFebruary 1, 2023
• skyhigh security secure web gateway (swg), trellix skyhigh secure web gateway +1 more XSS in Skyhigh Security SWG CVE-2023-0214 Public exploit 6.1 MediumJanuary 18, 2023
• Show olderLoading…