Known vulnerabilities in Trellix ePolicy Orchestrator (ePO)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-3339 | A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated… | 5.4 Medium | Oct 18, 2022 |
| CVE-2022-3338 | An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker… | 5.4 Medium | Oct 18, 2022 |
Other Trellix products
Trellix Agent 6
Intrusion Prevention System (IPS) Manager 4
ePolicy Orchestrator 4
System Information Reporter 3
Trellix Enterprise Security Manager (ESM) 3
DLP on-prem extensions 3
intrusion_prevention_system_manager 2
DLP Extension 2
Trellix HX Console 2
Trellix Agent (TA) 2
Enterprise Security Manager 2
Application and Change Control 1