Trellix

Latest CVEs · RSS

• CVE-2026-107171 2026-10-14 · CVSS 6.9
  An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
• CVE-2026-12588 2026-07-14 · CVSS 6.0
  An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger de
• CVE-2025-7958 2026-06-26 · CVSS 7.1
  A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interf
• CVE-2025-14963 2026-02-24 · CVSS 6.2
  A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.
• CVE-2025-0664 2025-07-21 · CVSS 6.7
  A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. Thi
• CVE-2025-5967 2025-07-01 · CVSS 5.3
  A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting
• CVE-2025-3773 2025-06-26 · CVSS 0.0
  A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sen
• CVE-2025-3722 2025-06-26 · CVSS 0.0
  A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post
• CVE-2025-3771 2025-06-26 · CVSS 7.2
  A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with S
• CVE-2025-0618 2025-04-23 · CVSS 6.5
  A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to
• CVE-2025-0617 2025-01-29 · CVSS 5.9
  An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger f
• CVE-2024-5955 2024-12-20 · CVSS 5.4
  Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft req
• CVE-2024-9679 2024-12-16 · CVSS 5.3
  A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials.
• CVE-2024-9678 2024-12-16 · CVSS 4.9
  An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading t
• CVE-2024-11482 2024-11-29 · CVSS 9.8
  A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, execut
• CVE-2024-11481 2024-11-29 · CVSS 8.2
  A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwar
• CVE-2024-5957 2024-09-05 · CVSS 6.3
  This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
• CVE-2024-5956 2024-09-05 · CVSS 6.5
  This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garb
• CVE-2024-7608 2024-08-27 · CVSS 5.9
  An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
• CVE-2024-6398 2024-07-15 · CVSS 4.3
  An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block pag
• CVE-2024-5731 2024-06-14 · CVSS 6.8
  A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by mani
• CVE-2024-5671 2024-06-14 · CVSS 9.8
  Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vuln
• CVE-2024-4176 2024-06-13 · CVSS 4.1
  An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command li
• CVE-2024-4844 2024-05-16 · CVSS 7.5
  Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privile
• CVE-2024-4843 2024-05-16 · CVSS 4.3
  ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate t