CVE-2025-5967 MEDIUM

CVE-2025-5967

Vendor Trellix

Product Endpoint Security HX

Weakness CWE-79 · XSS

Published July 1, 2025

Last update July 1, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Adjacent

Attack complexity High

Privileges required High

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data.

Key dates

02Disclosure timeline

July 1, 2025 CVE published

July 1, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-5967 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2026-1236 Envira Gallery for WordPress <= 1.12.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API CVE-2026-3610 HSC Cybersecurity Mailinspector URL mliUserValidation.php cross site scripting CVE-2025-12299 code-projects Simple Food Ordering System addproduct.php cross site scripting CVE-2021-33852 CVE-2025-66514 Nextcloud Mail stored HTML injection in subject text