Approved changes feed: RSS · Atom

cpe:2.3:a:trellix:epo_onprem_sp1_update4:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrellix (6a68a263-5f87-5bad-bbc0-1b650399118d)
ProductEpo Onprem Sp1 Update4 (bd015642-282b-5691-b4f3-5c93fc659160)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5955 vulnerable 2026-06-03 14:57:54.847018 Details available
MEDIUM (5.4)
Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator.
Published: 2024-12-20T05:53:28.886Z
Updated: 2024-12-20T17:37:43.395Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.