XSS in Trellix Endpoint Security Hx

CVE-2025-5967

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (5.6th percentile) — read the EPSS interpretation.