CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

CVE-2023-6072

The CVE-2023-6072 entry concerns Trellix Central Management (CM). A cross-site scripting vulnerability exists in CM versions prior to 9.1.3.97129, enabling a remote authenticated attacker to craft CM dashboard internal requests and inject arbitrary content into dashboard responses. Affected produ...