TR
Vendor
Trellix
67
CVEs
0
On KEV
1
New 30D
Products
TA6.9
Trellix Agent
Trellix
1 CVEs0 on KEV1 new
AG8.1
Agent
Trellix
6 CVEs0 on KEV0 new
ES9.8
Enterprise Security Manager
Trellix
6 CVEs0 on KEV0 new
ES7.8
Endpoint Security
Trellix
4 CVEs0 on KEV0 new
EO8.0
ePolicy Orchestrator
Trellix
4 CVEs0 on KEV0 new
IP9.8
Intrusion Prevention System (IPS) Manager
Trellix
4 CVEs0 on KEV0 new
IP9.8
Intrusion Prevention System Manager
Trellix
4 CVEs0 on KEV0 new
SI7.1
System Information Reporter
Trellix
3 CVEs0 on KEV0 new
TE9.8
Trellix Enterprise Security Manager (ESM)
Trellix
3 CVEs0 on KEV0 new
DL8.2
Data Loss Prevention
Trellix
2 CVEs0 on KEV0 new
DE5.3
DLP Extension
Trellix
2 CVEs0 on KEV0 new
TE6.1
Trellix ePolicy Orchestrator (ePO)
Trellix
2 CVEs0 on KEV0 new
TH6.0
Trellix HX Console
Trellix
2 CVEs0 on KEV0 new
AE7.8
Anti-Malware Engine
Trellix
1 CVEs0 on KEV0 new
AA7.2
Application And Change Control
Trellix
1 CVEs0 on KEV0 new
CM5.4
Central Management System
Trellix
1 CVEs0 on KEV0 new
EX5.4
Edr Xconsole
Trellix
1 CVEs0 on KEV0 new
EH7.8
Endpoint HX Agent (xAgent)
Trellix
1 CVEs0 on KEV0 new
ES5.3
Endpoint Security HX
Trellix
1 CVEs0 on KEV0 new
ES6.1
Endpoint Security Web Control
Trellix
1 CVEs0 on KEV0 new
EO5.4
ePO Onprem Sp1 Update4
Trellix
1 CVEs0 on KEV0 new
ES7.2
ESM
Trellix
1 CVEs0 on KEV0 new
FE6.5
FireEye EDR HX
Trellix
1 CVEs0 on KEV0 new
GE7.8
GetSusp
Trellix
1 CVEs0 on KEV0 new
IS6.7
Intelligent Sandbox
Trellix
1 CVEs0 on KEV0 new
MO7.8
Move
Trellix
1 CVEs0 on KEV0 new
SS6.1
Skyhigh Secure Web Gateway
Trellix
1 CVEs0 on KEV0 new
TA7.8
Trellix Agent (TA)
Trellix
1 CVEs0 on KEV0 new
TA7.2
Trellix Application and Change Control (TACC)
Trellix
1 CVEs0 on KEV0 new
TC5.4
Trellix Central Management (CM)
Trellix
1 CVEs0 on KEV0 new
TE5.4
Trellix EDR UI (XConsole)
Trellix
1 CVEs0 on KEV0 new
TE6.1
Trellix Endpoint Security (ENS) Web Control
Trellix
1 CVEs0 on KEV0 new
TE6.7
Trellix Endpoint Security (HX) Agent
Trellix
1 CVEs0 on KEV0 new
TI7.2
Trellix IPS Manager
Trellix
1 CVEs0 on KEV0 new
TN7.1
Trellix Network Security NX, EX, FX, AX, and CMS
Trellix
1 CVEs0 on KEV0 new
TN5.9
Trellix NX, EX, AX, FX, CMS and IVX
Trellix
1 CVEs0 on KEV0 new
XC5.4
Xconsole
Trellix
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107171 | TA Trellix Agent Trellix | 6.9 | Oct 14 | An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users |
| CVE-2026-12588 | TH Trellix HX Console Trellix | 6.0 | Jul 14 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console |
| CVE-2025-7958 | TN Trellix Network Security NX, EX, FX, AX, and CMS Trellix | 7.1 | Jun 26 | A Code Injection vulnerability existed in Trellix Network Security CM and NX |
| CVE-2025-14963 | EH Endpoint HX Agent (xAgent) Trellix | 7.8 | Feb 24 | A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges |
| CVE-2025-0664 | TE Trellix Endpoint Security (HX) Agent Trellix | 6.7 | Jul 21 | A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library |
| CVE-2025-5967 | ES Endpoint Security HX Trellix | 5.3 | Jul 1 | A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of… |
| CVE-2025-3773 | SI System Information Reporter Trellix | 5.5 | Jun 26 | A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information… |
| CVE-2025-3722 | SI System Information Reporter Trellix | 4.4 | Jun 26 | A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System… |
| CVE-2025-3771 | SI System Information Reporter Trellix | 7.1 | Jun 26 | A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files,… |
| CVE-2025-0618 | FE FireEye EDR HX Trellix | 6.5 | Apr 23 | A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to… |
| CVE-2025-0617 | TH Trellix HX Console Trellix | 5.9 | Jan 29 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console |
| CVE-2024-5955 | EO ePO Onprem Sp1 Update4 Trellix | 5.4 | Dec 20 | Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing… |
| CVE-2024-9679 | DE DLP Extension Trellix | 5.3 | Dec 16 | A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials |
| CVE-2024-9678 | DE DLP Extension Trellix | 4.9 | Dec 16 | An SQL Injection vulnerability existed in DLP Extension 11.11.1.3 |
| CVE-2024-11482 | TE Trellix Enterprise Security Manager (ESM) Trellix | 9.8 | Nov 29 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user |
| CVE-2024-11481 | TE Trellix Enterprise Security Manager (ESM) Trellix | 8.2 | Nov 29 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API |
| CVE-2024-5957 | IP Intrusion Prevention System (IPS) Manager Trellix | 7.5 | Sep 5 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager |
| CVE-2024-5956 | IP Intrusion Prevention System (IPS) Manager Trellix | 5.3 | Sep 5 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in… |
| CVE-2024-7608 | TN Trellix NX, EX, AX, FX, CMS and IVX Trellix | 5.9 | Aug 27 | An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal |
| CVE-2024-5731 | IP Intrusion Prevention System (IPS) Manager Trellix | 6.8 | Jun 14 | A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the… |
| CVE-2024-5671 | IP Intrusion Prevention System (IPS) Manager Trellix | 9.8 | Jun 14 | Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS… |
| CVE-2024-4176 | TE Trellix EDR UI (XConsole) Trellix | 5.4 | Jun 13 | An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables |
| CVE-2024-4844 | EO ePolicy Orchestrator Trellix | 7.5 | May 16 | Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO… |
| CVE-2024-4843 | EO ePolicy Orchestrator Trellix | 4.3 | May 16 | ePO doesn't allow a regular privileged user to delete tasks or assignments |
| CVE-2023-6072 | TC Trellix Central Management (CM) Trellix | 5.4 | Feb 13 | A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing… |
| CVE-2024-0310 | TE Trellix Endpoint Security (ENS) Web Control Trellix | 6.1 | Jan 10 | A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to… |
| CVE-2024-0213 | TA Trellix Agent (TA) Trellix | 7.8 | Jan 9 | A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through… |
| CVE-2024-0206 | AE Anti-Malware Engine Trellix | 7.8 | Jan 9 | A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of… |
| CVE-2023-6071 | ES ESM Trellix | 7.2 | Nov 30 | An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on… |
| CVE-2023-6070 | TE Trellix Enterprise Security Manager (ESM) Trellix | 4.3 | Nov 29 | A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering… |
| CVE-2023-5607 | TA Trellix Application and Change Control (TACC) Trellix | 7.2 | Nov 27 | An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could… |
| CVE-2023-5445 | EO ePolicy Orchestrator Trellix | 5.4 | Nov 17 | An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting… |
| CVE-2023-5444 | EO ePolicy Orchestrator Trellix | 8.0 | Nov 17 | CSRF in ePO leading to privilege escalation |
| CVE-2023-6119 | GE GetSusp Trellix | 7.8 | Nov 16 | An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a… |
| CVE-2023-3665 | ES Endpoint Security Trellix | 7.8 | Oct 4 | A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to… |
| CVE-2023-4814 | DL Data Loss Prevention Trellix | 7.1 | Sep 14 | A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission… |
| CVE-2023-3314 | ES Enterprise Security Manager Trellix | 8.8 | Jul 3 | A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s) |
| CVE-2023-3438 | MO Move Trellix | 7.8 | Jul 3 | An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe) |
| CVE-2023-3313 | ES Enterprise Security Manager Trellix | 7.8 | Jul 3 | An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system… |
| CVE-2023-1388 | AG Agent Trellix | 8.1 | Jun 7 | A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service… |
| CVE-2023-0976 | AG Agent Trellix | 7.8 | Jun 7 | A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder |
| CVE-2023-0977 | AG Agent Trellix | 6.5 | Apr 3 | A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory… |
| CVE-2023-0975 | AG Agent Trellix | 7.8 | Apr 3 | A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables… |
| CVE-2023-0978 | IS Intelligent Sandbox Trellix | 6.7 | Mar 13 | A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands… |
| CVE-2023-0400 | DL Data Loss Prevention Trellix | 8.2 | Feb 2 | The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0 |
| CVE-2023-0214 | SS Skyhigh Secure Web Gateway Trellix | 6.1 | Jan 18 | A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote… |
| CVE-2022-4326 | ES Endpoint Security Trellix | 6.0 | Dec 16 | Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the… |
| CVE-2022-3859 | AG Agent Trellix | 6.7 | Nov 30 | An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8 |
| CVE-2022-3340 | TI Trellix IPS Manager Trellix | 7.2 | Nov 4 | Trellix IPS Manager vulnerable to XXE |
| CVE-2022-3339 | TE Trellix ePolicy Orchestrator (ePO) Trellix | 6.1 | Oct 18 | Reflected XSS in Trellix ePO server |
| CVE-2022-3338 | TE Trellix ePolicy Orchestrator (ePO) Trellix | 5.4 | Oct 18 | XXE in Trellix ePO server |