CVE-2024-4843: Trellix Epolicy Orchestrator

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate the client task and client task assignments, hence escalating his/her privilege.

Affected products

• Trellix Epolicy Orchestrator

Published 2024-05-16. Last modified 2026-06-17.