EO
Product
ePolicy Orchestrator
4
CVEs
0
On KEV
8.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add ePolicy Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5444 | 8.0 | Nov 17 | CSRF in ePO leading to privilege escalation Affected: Prior to 5.10.0 SP1 UP2 |
| CVE-2024-4844 | 7.5 | May 16 | Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO… Affected: All versions below ePO 5.10 Service Pack 1 Update 2 |
| CVE-2023-5445 | 5.4 | Nov 17 | An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting… Affected: Prior to 5.10.0 SP1 UP2 |
| CVE-2024-4843 | 4.3 | May 16 | ePO doesn't allow a regular privileged user to delete tasks or assignments Affected: versions previous to ePO 5.10 Service Pack 1 Update 2 |
Showing 4