Vulnerabilities (CVE)

Filtered by vendor Trellix Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-1388 1 Trellix 1 Agent 2023-06-13 N/A 8.1 HIGH
A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable.
CVE-2023-0976 2 Apple, Trellix 2 Macos, Agent 2023-06-13 N/A 7.8 HIGH
A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.
CVE-2022-3340 1 Trellix 1 Intrusion Prevention System Manager 2022-11-08 N/A 7.2 HIGH
XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.