Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-5955

Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trellix ePO Onprem Sp1 Update4

Default version status: unaffected

  • sp1 update3 and versions prioraffected

References