CVE-2023-6070

4.3 mediumEPSS 0.2%

Medium (4.3) in trellix enterprise security manager. EPSS 0.2% chance of exploitation in the next 30 days.

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2023-11-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trellix:enterprise_security_manager

References

https://kcm.trellix.com/corporate/index?page=content&id=SB10413
https://kcm.trellix.com/corporate/index?page=content&id=SB10413

Check your stack JSON