4.6 Medium

CVE-2023-6072 A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote…

Description

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.

Affected products and versions

Product	Affected versions	Fixed in
Trellix Central Management (CM)	Versions not published

Do you use Trellix Central Management (CM)?

Track this CVE Watch Trellix Central Management (CM) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-6072

Timeline

Published February 13, 2024
Last modified April 24, 2025

References

docs.trellix.com docs.trellix.com

Track this CVE