Security readout for executives and security teams
Plain-English summary
Trellix CM before 9.1.3.97129 has an authenticated dashboard XSS flaw. A signed-in user could craft internal dashboard requests that inject arbitrary content into responses viewed in the CM dashboard. Business impact is limited but real: possible exposure or manipulation of dashboard data in a management system.
Executive priority
Treat as a routine but time-bound patching item for affected Trellix CM deployments. It is not marked as actively exploited, but it affects a security management platform and can impact dashboard trust and displayed content.
Technical view
CVE-2023-6072 is CWE-79 cross-site scripting in Trellix Central Management. The CVSS 3.1 score is 4.6: network reachable, low complexity, low privileges required, user interaction required, with low confidentiality and integrity impact and no availability impact.
Likely exposure
Exposure is limited to organizations running Trellix Central Management versions prior to 9.1.3.97129. The source data states authenticated access is required, so public unauthenticated exposure is not supported by the evidence provided.
Exploitation context
The CVE record does not indicate CISA KEV listing or active exploitation. The available description supports a remote authenticated attack requiring user interaction through the CM dashboard. No public exploit status is provided in the supplied bundle.
Researcher notes
Evidence is narrow: the supplied sources identify the product, affected version range, CWE, CVSS vector, and authenticated dashboard injection behavior. They do not provide payload details, exploitation in the wild, or detailed remediation beyond the fixed version boundary.
Mitigation direction
- Upgrade Trellix Central Management to 9.1.3.97129 or later.
- Review Trellix release notes for supported upgrade guidance.
- Restrict CM dashboard access to trusted authenticated users until upgraded.
- Review CM user accounts for unnecessary low-privilege access.
Validation and detection
- Inventory Trellix CM instances and record exact installed versions.
- Confirm no instance is running a version prior to 9.1.3.97129.
- Verify CM dashboard access requires authenticated, authorized users.
- Check vendor documentation for any additional post-upgrade validation steps.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-79: User-session and phishing behavior lookup
Client-side and session-facing weaknesses should be reviewed alongside initial-access and user-execution behaviors. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-6072 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.6 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N2.12.5Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
4.6MediumVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Source materials
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.