CVE-2025-5967: Trellix Endpoint Security HX

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data.

Affected products

• Trellix Endpoint Security HX: version 10.0.4 only

Published 2025-07-01. Last modified 2026-06-17.