Cross site scripting

2024-01-1517:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

fireeye hxtool

version 4.6

javascript payload

profile name

hostname/ip

nvd

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the ‘Profile Name’ and ‘Hostname/IP’ parameters that will be triggered when items are loaded.