Browse / Trellix

Trellix

See its reports on the map

Attack surface: 4,968 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Trellix

• Authentication2
• Code Execution1
• Cross-site Scripting1
• Access Control1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. default credentials at https://52.42.105.71/Improper Authentication - Generic · critical
   77 votes
2. Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10OS Command Injection · critical
   60 votes
3. Vulnerability Report: NO RATE LIMIT Password RESETImproper Authentication - Generic · low
   59 votes
4. RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/ Cross-site Scripting (XSS) - Reflected · medium
   54 votes
5. Broken Access Control on **healthwatch.trellix.com** Leading to Unauthorized Access and Sensitive Data ExposureImproper Access Control - Generic · medium
   40 votes
6. Sensitive Information DisclosureInformation Disclosure
   12 votes