Trellix - vulnerabilities (CVEs)
56 CVEs in 51 products, 1 in the last 30 days, newest from 2026-10-14.
Products
- Agent - 6 CVEs
- Enterprise Security Manager - 6 CVEs
- Trellix Agent - 6 CVEs
- Endpoint Security - 4 CVEs
- Epolicy Orchestrator - 4 CVEs
- Intrusion Prevention System Ips Manager - 4 CVEs
- Intrusion Prevention System Manager - 4 CVEs
- System Information Reporter - 3 CVEs
- Trellix Enterprise Security Manager Esm - 3 CVEs
- Ax - 2 CVEs
- Data Loss Prevention - 2 CVEs
- Dlp Extension - 2 CVEs
- Ex - 2 CVEs
- Fx - 2 CVEs
- Trellix Agent Ta - 2 CVEs
- Trellix Epolicy Orchestrator Epo - 2 CVEs
- Trellix Hx Console - 2 CVEs
- And Cms - 1 CVEs
- Anti-malware Engine - 1 CVEs
- Application And Change Control - 1 CVEs
- Central Management System - 1 CVEs
- Cms And Ivx - 1 CVEs
- Data Loss Prevention Dlp - 1 CVEs
- Data Loss Prevention Endpoint For Windows - 1 CVEs
- Dlp Endpoint For Windows - 1 CVEs
- Dxl Broker - 1 CVEs
- Edr Xconsole - 1 CVEs
- Endpoint Hx Agent Xagent - 1 CVEs
- Endpoint Security Hx - 1 CVEs
- Endpoint Security Web Control - 1 CVEs
- Epo Onprem Sp1 Update4 - 1 CVEs
- Esm - 1 CVEs
- Fireeye Edr Hx - 1 CVEs
- Getsusp - 1 CVEs
- Intelligent Sandbox - 1 CVEs
- Move - 1 CVEs
- Skyhigh Secure Web Gateway - 1 CVEs
- Trellix Application And Change Control Tacc - 1 CVEs
- Trellix Central Management Cm - 1 CVEs
- Trellix Edr Ui Xconsole - 1 CVEs
- Trellix Endpoint Security - 1 CVEs
- Trellix Endpoint Security Ens Web Control - 1 CVEs
- Trellix Endpoint Security Hx Agent - 1 CVEs
- Trellix Epo - 1 CVEs
- Trellix Intelligent Sandbox - 1 CVEs
- Trellix Ips Manager - 1 CVEs
- Trellix Move - 1 CVEs
- Trellix Network Security Nx - 1 CVEs
- Trellix Nx - 1 CVEs
- Xagent - 1 CVEs
- Xconsole - 1 CVEs
Newest CVEs of Trellix
- CVE-2026-107171 - CVSS 6.9 (medium), 2026-10-14: An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
- CVE-2026-12588 - CVSS 6 (medium), 2026-07-14: An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger…
- CVE-2025-7958 - CVSS 7.1 (high), 2026-06-26: A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web…
- CVE-2025-14963 - CVSS 7.8 (high), 2026-02-24: A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system…
- CVE-2025-0664 - CVSS 6.7 (medium), 2025-07-21: A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library.…
- CVE-2025-5967 - CVSS 5.3 (medium), 2025-07-01: A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field,…
- CVE-2025-3773 - CVSS 5.5 (medium), 2025-06-26: A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract…
- CVE-2025-3771 - CVSS 7.2 (high), 2025-06-26: A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with…
- CVE-2025-3722 - CVSS 4.4 (medium), 2025-06-26: A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post…
- CVE-2025-0618 - CVSS 6.5 (medium), 2025-04-23: A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event…
- CVE-2025-0617 - CVSS 5.9 (medium), 2025-01-29: An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger…
- CVE-2024-5955 - CVSS 5.4 (medium), 2024-12-20: Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft…
- CVE-2024-9679 - CVSS 5.3 (medium), 2024-12-16: A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials.
- CVE-2024-9678 - CVSS 4.9 (medium), 2024-12-16: An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading…
- CVE-2024-11482 - CVSS 9.8 (critical), 2024-11-29: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection,…
- CVE-2024-11481 - CVSS 8.2 (high), 2024-11-29: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure…
- CVE-2024-5956 - CVSS 6.5 (medium), 2024-09-05: This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with…
- CVE-2024-5957 - CVSS 7.5 (high), 2024-09-05: This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
- CVE-2024-7608 - CVSS 5.9 (medium), 2024-08-27: An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.
- CVE-2024-5731 - CVSS 6.8 (medium), 2024-06-14: A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by…
- CVE-2024-5671 - CVSS 9.8 (critical), 2024-06-14: Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the…
- CVE-2024-4176 - CVSS 5.4 (medium), 2024-06-13: An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command…
- CVE-2024-4844 - CVSS 7.5 (high), 2024-05-16: Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin…
- CVE-2024-4843 - CVSS 4.3 (medium), 2024-05-16: ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate…
- CVE-2023-6072 - CVSS 5.4 (medium), 2024-02-13: A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard…
- CVE-2024-0310 - CVSS 6.1 (medium), 2024-01-10: A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header…
- CVE-2024-0213 - CVSS 8.2 (high), 2024-01-09: A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service…
- CVE-2024-0206 - CVSS 7.8 (high), 2024-01-09: A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially…
- CVE-2023-6071 - CVSS 8.4 (high), 2023-11-30: An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute…
- CVE-2023-6070 - CVSS 4.3 (medium), 2023-11-29: A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially…
