Trellix Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trellix/ Thu, 23 Feb 2023 05:19:15 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Trellix Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trellix/ 32 32 CVE-2022-3340 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3340/ Thu, 23 Feb 2023 05:19:15 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3340/ XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

The post CVE-2022-3340 appeared first on CVE Vulnerability.

]]> XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

The post CVE-2022-3340 appeared first on CVE Vulnerability.

]]> CVE-2023-0400 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0400/ Wed, 22 Feb 2023 14:02:14 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0400 The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload […]

The post CVE-2023-0400 appeared first on CVE Vulnerability.

]]> The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.

The post CVE-2023-0400 appeared first on CVE Vulnerability.

]]> CVE-2023-0214 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0214/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0214 A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.

The post CVE-2023-0214 appeared first on CVE Vulnerability.

]]> A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.

The post CVE-2023-0214 appeared first on CVE Vulnerability.

]]>