How many Trellix ePolicy Orchestrator CVEs are in CISA KEV?

None of Trellix ePolicy Orchestrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Trellix ePolicy Orchestrator are affected?

2 distinct Trellix ePolicy Orchestrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Trellix ePolicy Orchestrator CVEs?

Trellix ePolicy Orchestrator's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-798 (Use of Hard-coded Credentials).

What is the average severity of Trellix ePolicy Orchestrator CVEs?

The average CVSS base score across Trellix ePolicy Orchestrator's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Trellix

4 CVEs

Trellix ePolicy Orchestrator Vulnerabilities

Name: Trellix ePolicy Orchestrator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ePolicy Orchestrator by Trellix.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.3

Avg CVSS

2023–2024

Last updated May 16, 2024

Overview

Trellix ePolicy Orchestrator has 4 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Trellix ePolicy Orchestrator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Trellix ePolicy Orchestrator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Trellix ePolicy Orchestrator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Trellix ePolicy Orchestrator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Trellix ePolicy Orchestrator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= Prior to 5.10.0 SP1 UP22 CVEs
>= epo_5.10_service_pack_1_update_21 CVE

Find a version

4 CVEs

Sort

High vulnerability · 2024-05-16
CVE-2024-4844CWE-798
High · CVSS 7.5
EPSS 0.2% (14th pct)2024-05-16
Medium vulnerability · 2024-05-16
CVE-2024-4843CWE-639
Medium · CVSS 4.3
EPSS 0.3% (18th pct)2024-05-16
Medium vulnerability · 2023-11-17
CVE-2023-5445
Patch
CWE-601
Medium · CVSS 5.4
EPSS 0.4% (33th pct)2023-11-17
High vulnerability · 2023-11-17
CVE-2023-5444
Patch
CWE-352
High · CVSS 8.0
EPSS 0.4% (28th pct)2023-11-17

Common weakness types

The CWE weakness categories most often found in Trellix ePolicy Orchestrator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Trellix ePolicy Orchestrator CVEs were published each year.

2023

2

2024

2

Other Trellix products

Browse vulnerabilities for other products by Trellix.

agent6 CVEs enterprise security manager6 CVEs Trellix Agent5 CVEs endpoint security4 CVEs Intrusion Prevention System (IPS) Manager4 CVEs intrusion prevention system manager4 CVEs system information reporter3 CVEs Trellix Enterprise Security Manager (ESM)3 CVEs

All Trellix vulnerabilities

Frequently asked questions

Common questions about Trellix ePolicy Orchestrator vulnerabilities.

How many CVEs does Trellix ePolicy Orchestrator have?: Trellix ePolicy Orchestrator has 4 published CVE records since 2023.
How many Trellix ePolicy Orchestrator CVEs are in CISA KEV?: None of Trellix ePolicy Orchestrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Trellix ePolicy Orchestrator vulnerabilities?: No Trellix ePolicy Orchestrator CVEs currently have a tracked public exploit in this dataset.
Which versions of Trellix ePolicy Orchestrator are affected?: 2 distinct Trellix ePolicy Orchestrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Trellix ePolicy Orchestrator CVEs?: Trellix ePolicy Orchestrator's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-798 (Use of Hard-coded Credentials).
What is the average severity of Trellix ePolicy Orchestrator CVEs?: The average CVSS base score across Trellix ePolicy Orchestrator's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Trellix ePolicy Orchestrator vulnerabilities

Monitor new Trellix ePolicy Orchestrator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing