Description
Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trellix | ePO Onprem Sp1 Update4 | sp1 update3 and versions prior | — |
Advisories 1
- WID-SEC-2024-3738 Trellix ePolicy Orchestrator: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Dec 19, 2024