Trellix: >> Intrusion Prevention System Manager >> 10.1 Security Vulnerabilities
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
CVSS Score
6.3
EPSS Score
0.001
Published
2024-09-05
XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.
CVSS Score
5.9
EPSS Score
0.001
Published
2022-11-04