Approved changes feed: RSS · Atom

cpe:2.3:a:trellix:trellix_hx_console:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrellix (6a68a263-5f87-5bad-bbc0-1b650399118d)
ProductTrellix Hx Console (31b0951c-08ac-5216-a7a1-5d88b27f895e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12588 vulnerable 2026-07-29 00:23:32.452078 Details available
An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a large file that consumes an excessive amount of system resources thus causing a Denial of Service.
Published: 2026-07-14T12:45:10.526Z
Updated: 2026-07-14T13:26:51.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0617 vulnerable 2026-06-08 07:02:24.954011 Details available
MEDIUM (5.9)
An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions in the consumer process thus causing a Denial of Service.
Published: 2025-01-29T10:08:29.476Z
Updated: 2025-02-12T19:51:14.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.