5.4 Medium

CVE-2024-5955 Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a…

Description

Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator.

Affected products and versions

Product	Affected versions	Fixed in
ePO Onprem Sp1 Update4	Versions not published

Do you use ePO Onprem Sp1 Update4?

Track this CVE Watch ePO Onprem Sp1 Update4 Check my SBOMs

www.cveye.io/en/cve/CVE-2024-5955

Timeline

Published December 20, 2024
Last modified December 20, 2024

References

thrive.trellix.com thrive.trellix.com

Track this CVE