Vulnerabilities
10 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-0320 | Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2024-0318 +1 in the same advisory: …0319 | Cross-Site Scripting in FireEye HXTool affecting version 4.6. Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2024-0317 | Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2024-0316 | Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage. NVD description · AI analysis pending | 7.5 | <1% |
| — | ||
| CVE-2024-0315 +1 in the same advisory: …0314 | Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process. NVD description · AI analysis pending | 7.8 group max | <1% |
| — | ||
| CVE-2021-28970 +1 in the same advisory: …28969 | eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id paramet eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NVD description · AI analysis pending | 6.5 | 1% | PoC |
| — | |
| CVE-2020-25034 | eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[ eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature. NVD description · AI analysis pending | 6.5 | 1% | PoC |
| — |