CVE-2024-11482

9.8 criticalEPSS 2.5%

Critical (9.8) in trellix enterprise security manager. EPSS 2.5% chance of exploitation in the next 30 days.

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-11-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trellix:enterprise_security_manager

References

https://thrive.trellix.com/s/article/000014058#h2_0
https://hackerone.com/reports/2817658

Check your stack JSON