Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-0617 EUVD-2025-1793GHSA-cf2r-vpqc-55g6

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection w…

Published Jan 29, 2025 · Updated Feb 12, 2025 · Assigned by trellix

Description

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions in the consumer process thus causing a Denial of Service.

Affected products

VendorProductAffectedFixed
Trellix Trellix HX Console 5.1.1 —

References