High severity8.4NVD Advisory· Published Nov 30, 2023· Updated Jun 17, 2026
CVE-2023-6071
CVE-2023-6071
Description
An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on the ESM. This is possible as the input isn't correctly sanitized when adding a new data source.
Affected products
3- cpe:2.3:a:trellix:enterprise_security_manager:*:*:*:*:*:*:*:*Range: <11.6.9
Patches
Vulnerability mechanics
References
1- kcm.trellix.com/corporate/indexnvdVendor Advisory
News mentions
0No linked articles in our index yet.