CVE-2024-5957

CVE-2024-5957 : The provided documents corroborate a vulnerability in Trellix Manager where unauthenticated remote attackers can bypass authentication and gain access to the Manager’s APIs. The exact affected product versions, root cause details, and a formal fix are not specified in the supplied...

CVE-2022-3340

CVE-2022-3340 is an XXE vulnerability in Trellix IPS Manager prior to 10.1 M8. The issue allows a remote authenticated administrator to trigger an XML External Entity attack via the administrator interface, enabling the import of a saved XML configuration file. Affected product: Trellix IPS Manag...

CVE-2024-5956

The entry CVE-2024-5956 affects Trellix IPS Manager. PT-2024-37269 identifies Trellix IPS Manager version 11.1.7.97 as vulnerable and states that unauthenticated remote attackers can bypass authentication to access partial data and receive garbage data in responses. The description implies a bypa...