Advisories · Technology

Trellix ePolicy Orchestrator.

Every CVE that names Trellix ePolicy Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4844 CVE record

CVSS 7.5 High

Hard-coded credentials in Trellix ePolicy Orchestrator
- Trellix ePolicy Orchestrator
- Hard-coded credentials
Not analysed yet 16 May 2024
CVE-2024-4843 CVE record

CVSS 4.3 Medium

Insecure direct object reference in Trellix ePolicy Orchestrator
- Trellix ePolicy Orchestrator
- Broken access control
Not analysed yet 16 May 2024
CVE-2023-5445 CVE record

CVSS 5.4 Medium

Open redirect in Trellix ePolicy Orchestrator
- Trellix ePolicy Orchestrator
- Open redirect
Not analysed yet 17 Nov 2023
CVE-2023-5444 CVE record

CVSS 8.0 High

CSRF in ePO leading to privilege escalation
- Trellix ePolicy Orchestrator
- Cross-site request forgery (CSRF)
Not analysed yet 17 Nov 2023