CVE-2024-11481: high-severity vulnerability in Trellix Enterprise Security Manager (ESM)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.2epss 0.4%
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Affected products
Trellix · Trellix Enterprise Security Manager (ESM)Related CVEs — Trellix Enterprise Security Manager (ESM)
In the same product, most dangerous first.