Intrusion Prevention System Manager vulnerabilities

2 known vulnerabilities in Intrusion Prevention System Manager from Trellix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Intrusion Prevention System (IPS) Manager: Deserialization of Untrusted Data

  CVE-2024-5671Jun 14, 2024Trellix

  Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.

• 7.2 High severity

  Trellix IPS Manager: Improper Restriction of XML External Entity Reference

  CVE-2022-3340Nov 4, 2022Trellix

  XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.