Skip to content
OpenAdvisories
Medium · 4.6 CVE-2023-6072 EUVD-2023-58328GHSA-rwfg-mjhh-rj23

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craf…

Published Feb 13, 2024 · Updated Apr 24, 2025 · Assigned by trellix

Vendor: Trellix Product: Trellix Central Management (CM)

Description

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.

Affected products

VendorProductAffectedFixed
Trellix Trellix Central Management (CM) Prior to 9.1.3.97129 —

References