Medium severity6.1NVD Advisory· Published Jan 18, 2023· Updated Jun 17, 2026
CVE-2023-0214
CVE-2023-0214
Description
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:trellix:skyhigh_secure_web_gateway:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:trellix:skyhigh_secure_web_gateway:*:*:*:*:*:*:*:*range: >=10.0.0,<10.2.17
- cpe:2.3:a:trellix:skyhigh_secure_web_gateway:12.0.0:*:*:*:*:*:*:*
- Range: <11.2.6, <10.2.17, <12.0.1
- Range: 11.x
Patches
Vulnerability mechanics
References
1- kcm.trellix.com/corporate/indexnvdVendor Advisory
News mentions
0No linked articles in our index yet.