Endpoint Security and HX
CVE-2024-4176: Cross site scripting in Trellix EDR UI (XConsole)
An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trellix EDR UI (XConsole) Earlier than May 17, 2024 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to the EDR XConsole end user.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.