5.3
Medium
CVE-2025-5967 A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the…
Description
A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Endpoint Security HX | 10.0.4 | No fix stated |