Lucene search
+L

7 matches found

OSV
OSV
•added 2024/06/13 9:15 a.m.•15 views

CVE-2024-4176

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...

5.4CVSS5.7AI score0.00313EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/13 8:59 a.m.•40 views

CVE-2024-4176

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...

4.1CVSS0.00313EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/13 8:59 a.m.•75 views

CVE-2024-4176

CVE-2024-4176 affects Trellix XDR XConsole. The issue is a cross-site scripting vulnerability in XConsole prior to this release, enabling an attacker to leverage XSS/HTML injection via command line variables to craft malicious links that could affect the end user’s browser. Documents consistently...

5.4CVSS5.9AI score0.00313EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/13 8:59 a.m.•22 views

CVE-2024-4176

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...

4.1CVSS6.8AI score0.00313EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•16 views

Trellix XDR XConsole Cross-Site Scripting Vulnerability

Trellix XDR XConsole is an interface from Trellix USA that simplifies the Trellix XDR user experience. A cross-site scripting vulnerability exists in Trellix XDR XConsole, which stems from the presence of a cross-site scripting vulnerability that could allow an attacker to perform HTML injection...

5.4CVSS6.5AI score0.00313EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/06/13 12:00 a.m.•19 views

PT-2024-29554 · Unknown · Edr Xconsole

Name of the Vulnerable Software and Affected Versions: EDR XConsole affected versions not specified Description: A cross-site scripting vulnerability allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on...

5.4CVSS6.4AI score0.00313EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•3 views

CVE-2024-4176: Improper Neutralization of Input During Web Page Generation

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to th...

5.4CVSS5.9AI score0.00313EPSS
SaveExploits1References1
Rows per page
Query Builder