CVE-2023-6071: An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute…

PriorityP346high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

0.85%

53.6th percentile

An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on the ESM. This is possible as the input isn't correctly sanitized when adding a new data source.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
trellix	enterprise_security_manager	< 11.6.9	11.6.9
trellix	esm	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.