CVE-2024-5955 — Trellix / ePO Onprem Sp1 Update4

CVE-2024-5955

Trellix / ePO Onprem Sp1 Update4 PUBLISHED

Description (CNA)

Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator.

Affected (CNA)

Vendor / product	Versions
Trellix / ePO Onprem Sp1 Update4	affected sp1 update3 and versions prior

CWE

CWE-79

References

https://thrive.trellix.com/s/article/000014118

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.