Trellix Trellix Epolicy Orchestrator (Epo)
2 CVEs affecting Trellix Trellix Epolicy Orchestrator (Epo). Latest disclosed: 2022-10-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3339 | Medium | 5.4 | 2022-10-18 | A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an… |
CVE-2022-3338 | Medium | 5.4 | 2022-10-18 | An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side R… |