CVE-2023-6072: Trellix Central Management System

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.

Affected products

• Trellix Central Management System: before 9.1.3.97129 (fixed in 9.1.3.97129)

Published 2024-02-13. Last modified 2026-06-17.