Known vulnerabilities in Trellix ePolicy Orchestrator
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-4844 | Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update… | 7.5 High | May 16, 2024 |
| CVE-2024-4843 | ePO doesn't allow a regular privileged user to delete tasks or assignments | 4.3 Medium | May 16, 2024 |
| CVE-2023-5445 | An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user… | 5.4 Medium | Nov 17, 2023 |
| CVE-2023-5444 | A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low… | 8.0 High | Nov 17, 2023 |
Other Trellix products
Trellix Agent 6
Intrusion Prevention System (IPS) Manager 4
System Information Reporter 3
DLP on-prem extensions 3
Trellix Enterprise Security Manager (ESM) 3
Trellix ePolicy Orchestrator (ePO) 2
Trellix Agent (TA) 2
DLP Extension 2
Trellix HX Console 2
intrusion_prevention_system_manager 2
Enterprise Security Manager 2
Application and Change Control 1