Medium severity4.9NVD Advisory· Published Dec 16, 2024· Updated Jun 17, 2026

CVE-2024-9678

Description

An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution.

Affected products

Trellix/DLP Extensionllm-fuzzy
Range: 11.11.1.3

Patches

Vulnerability mechanics

References

thrive.trellix.com/s/article/000013964nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000