Trellix ePolicy Orchestrator

Name: Trellix ePolicy Orchestrator
Brand: Trellix

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical2high7medium2low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-30639US	high7.5	6.89% (94th)	—	5.10 CU 11	2021-07-12	< 5.10 CU 11
CVE-2021-29921US	critical9.8	6.88% (94th)	—	5.10 CU 11	2021-05-06	< 5.10 CU 11
CVE-2021-2341US	medium4.3	4.24% (91st)	—	5.10 CU 11	2021-07-21	< 5.10 CU 11
CVE-2021-2388US	medium5.1	4.01% (90th)	—	5.10 CU 11	2021-07-21	< 5.10 CU 11
CVE-2021-2432US	medium4.3	3.70% (90th)	—	5.10 CU 11	2021-07-21	< 5.10 CU 11
CVE-2021-2163US	low2.6OT elevated	3.57% (89th)	—	5.10 CU 11	2021-04-22	< 5.10 CU 11
CVE-2021-2369US	medium4.3	3.44% (89th)	—	5.10 CU 11	2021-07-21	< 5.10 CU 11
CVE-2021-23839US	low3.7OT elevated	2.96% (87th)	—	5.10 CU 11	2021-02-16	< 5.10 CU 11
CVE-2022-28331US	critical9.8	1.57% (75th)	—	5.10 Service Pack 1	2023-01-31	< 5.10 Service Pack 1
CVE-2022-24963US	critical9.8	1.47% (74th)	—	5.10 Service Pack 1	2023-01-31	< 5.10 Service Pack 1
CVE-2022-25147US	medium6.5	1.42% (73rd)	—	5.10 Service Pack 1	2023-01-31	< 5.10 Service Pack 1
CVE-2024-38809US	—	0.85% (58th)	—	5.10.0 Service pack 1 Update 5	2024-09-27	< 5.10.0 Service pack 1 Update 5
CVE-2020-28928US	medium5.5	0.65% (51st)	—	5.10 CU 11	2020-11-24	< 5.10 CU 11
CVE-2024-38808US	—	0.57% (47th)	—	5.10.0 Service pack 1 Update 5	2024-08-20	< 5.10.0 Service pack 1 Update 5
CVE-2023-5445US	medium5.4	0.41% (35th)	—	no fix	2023-11-17	≤ Prior to 5.10.0 SP1 UP2
CVE-2024-5955US	—	0.37% (31st)	—	5.10 Service Pack 1 Update 3	2024-12-20	< 5.10 Service Pack 1 Update 3
CVE-2023-5444US	high8.0	0.35% (29th)	—	no fix	2023-11-17	≤ Prior to 5.10.0 SP1 UP2
CVE-2024-4843US	—	0.27% (18th)	—	no fix	2024-05-16	≤ versions previous to ePO 5.10 Service Pack 1 Update 2
CVE-2024-4844US	—OT elevated	0.23% (14th)	—	no fix	2024-05-16	≤ All versions below ePO 5.10 Service Pack 1 Update 2
CVE-2025-0736US	—	0.21% (12th)	—	2025 Update 5	2025-01-28	< 2025 Update 5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)16 CVEs
EUEU Vulnerability Database (ENISA)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan