CVE-2025-5967

Trellix / Endpoint Security HX PUBLISHED

Description (CNA)

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data.

Affected (CNA)

Vendor / product	Versions
Trellix / Endpoint Security HX	affected 10.0.4

CWE

CWE-79

References

https://thrive.trellix.com/s/article/000014606

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.