Approved changes feed: RSS · Atom

cpe:2.3:a:trellix:trellix_central_management_(cm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrellix (6a68a263-5f87-5bad-bbc0-1b650399118d)
ProductTrellix Central Management (Cm) (7130ba0d-767a-5d93-93c9-dd1af0834d31)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6072 vulnerable 2026-06-03 14:53:50.270943 Details available
MEDIUM (4.6)
A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.
Published: 2024-02-13T09:39:54.600Z
Updated: 2025-04-24T15:39:35.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.