CVE-2023-3946

Trellix ePolicy Orchestrator (ePO) prior to 5.10 SP1 Update 1 contains a reflected cross-site scripting (XSS) vulnerability. An unauthenticated attacker could entice an authenticated ePO administrator to click a crafted link, potentially exposing the administrator’s session and enabling limited a...