Trellix Trellix Enterprise Security Manager (ESM)

• CVE-2024-11482 Critical 9.8 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user. 2.5%
• CVE-2024-11481 High 8.2 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate 0.4%
• CVE-2023-6070 Medium 4.3 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible 0.2%