ePolicy Orchestrator vulnerabilities

2 known vulnerabilities in ePolicy Orchestrator from Trellix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ePolicy Orchestrator: Use of Hard-coded Credentials

  CVE-2024-4844May 16, 2024Trellix

  Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO server to read the contents of the orion.keystore file, allowing them to access the e

• 8.0 High severity

  ePolicy Orchestrator: Cross-Site Request Forgery

  CVE-2023-5444Nov 17, 2023Trellix

  A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server. This impacts the dashboard area of the user inter