Vendor
Trellix
59 known vulnerabilities in products by Trellix, 0 of them actively exploited (CISA KEV).
Key figures
59
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-11482 | Trellix Enterprise Security Manager (ESM): OS Command Injection | 9.8 | |
| Medium | CVE-2023-0214 | XSS in Skyhigh Security SWG | 6.1 | |
| Critical | CVE-2024-5671 | Trellix Intrusion Prevention System (IPS) Manager: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2023-5607 | Trellix Application and Change Control (TACC): Path Traversal | 8.4 | |
| High | CVE-2023-3314 | Trellix Enterprise Security Manager: OS Command Injection | 8.1 | |
| High | CVE-2023-6071 | Trellix ESM: Command Injection | 8.4 | |
| High | CVE-2026-115738 | Trellix DLP on-prem extensions: SQL Injection | 6.5 | |
| Medium | CVE-2026-107171 | Trellix Agent: Use of Hard-coded Cryptographic Key | — | |
| Medium | CVE-2025-0618 | Trellix FireEye EDR HX: Code Injection | 6.5 | |
| Medium | CVE-2022-2330 | XXE vulnerability in DLP Endpoint for Windows | 6.5 | |
| Medium | CVE-2026-115739 | Trellix DLP on-prem extensions: Use of Hard-coded Cryptographic Key | 6.5 | |
| High | CVE-2024-11481 | Trellix Enterprise Security Manager (ESM): Path Traversal | 8.2 | |
| High | CVE-2025-7958 | Code Injection (CVE-2025-7958) | — | |
| Medium | CVE-2026-115740 | Trellix DLP on-prem extensions: Server-Side Request Forgery (SSRF) | 4.3 | |
| Medium | CVE-2023-0977 | Trellix Agent: Classic Buffer Overflow | 6.7 | |
| Medium | CVE-2024-9678 | Trellix DLP Extension: SQL Injection | 4.9 | |
| Medium | CVE-2026-12588 | Trellix HX Console: Improper Handling of Highly Compressed Data (Data Amplification) | — | |
| High | CVE-2023-3313 | Trellix Enterprise Security Manager: OS Command Injection | 7.8 | |
| Medium | CVE-2022-3339 | Reflected XSS in Trellix ePO server | 5.4 | |
| High | CVE-2023-0976 | Trellix Agent: Uncontrolled Search Path Element | 6.3 | |
| High | CVE-2025-14963 | Trellix Endpoint HX Agent (xAgent): Improper Input Validation | 7.8 | |
| High | CVE-2023-1388 | Trellix Agent: security vulnerability | 6.3 | |
| High | CVE-2022-3340 | Trellix IPS Manager vulnerable to XXE | 5.9 | |
| High | CVE-2023-5444 | CSRF in ePO leading to privilege escalation | 8.0 | |
| High | CVE-2022-2313 | DLL high jacking in Trellix Agent | 8.2 |