Remote file inclusion

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

Cross site scripting

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

CVE-2024-0316

CVE-2024-0316 affects FireEye Endpoint Security (Trellix) 5.2.0.958244. The issue is described as an improper cleanup in exceptions thrown, enabling an attacker to send multiple requests to the containment_notify/preview parameter and potentially cause a service outage. Connected sources confirm ...

CVE-2024-0315

CVE-2024-0315 affects FireEye/Central Management (version 9.1.1.956704). A remote file inclusion flaw in the report creation workflow allows an attacker to upload a malicious PDF to the system. Documented impact indicates high confidentiality, integrity, and availability risks (per CVSS details i...

CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

CVE-2024-0314

CVE-2024-0314 is a reflected XSS vulnerability in FireEye Central Management (v9.1.1.956704). The issue allows an attacker to modify HTML elements in the application, enabling session hijacking. Documents consistently describe XSS in the affected FireEye Central Management product; no explicit ro...

CVE-2024-0314 XSS vulnerability in FireEye Central Management

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

CVE-2024-0314 XSS vulnerability in FireEye Central Management

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

PT-2024-15466 · Fireeye · Fireeye Hxtool

Name of the Vulnerable Software and Affected Versions: FireEye HXTool version 4.6 Description: This issue allows an attacker to store a specially crafted JavaScript payload in the Profile Name and Hostname/IP parameters. The payload will be triggered when items are loaded, potentially leading to...

PT-2024-15468 · Fireeye · Fireeye Malware Analysis

Name of the Vulnerable Software and Affected Versions: FireEye Malware Analysis AX version 9.0.3.936530 Description: The issue allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. This is achieved by...

FireEye HXTool Cross-Site Scripting Vulnerability

FireEye HXTool is an extended user interface for FireEye. A cross-site scripting vulnerability exists in FireEye HXTool version 4.6, which stems from a cross-site scripting vulnerability. The vulnerability allows an attacker to store a specially crafted JavaScript payload in the "Profile Name" an...

FireEye HXTool Input Validation Error Vulnerability

FireEye HXTool is an extended user interface for FireEye. An input validation error vulnerability exists in FireEye HXTool version 4.6, which stems from an open redirection vulnerability. This vulnerability can be exploited to redirect a legitimate user to a malicious page by changing the...

PT-2024-15464

Name of the Vulnerable Software and Affected Versions FireEye Central Management version 9.1.1.956704 Description The issue allows an attacker to modify special HTML elements in the application, causing a reflected XSS that could lead to session hijacking. This occurs because an attacker can modi...

PT-2024-15465

Name of the Vulnerable Software and Affected Versions FireEye Central Management version 9.1.1.956704 Description The issue allows an attacker to upload a malicious PDF file to the system during the report creation process. This is a remote file inclusion vulnerability. Recommendations For FireEy...

PT-2024-15467

Name of the Vulnerable Software and Affected Versions FireEye HXTool version 4.6 Description The issue allows an attacker to redirect a legitimate user to a malicious page by changing the redirect uri parameter. This could lead to phishing attacks or other malicious activities. Recommendations Fo...

Mainway FireEye EX Cross-Site Scripting Vulnerability

Mainway FireEye EX is an all-in-one platform for enterprise security from Mainway, a China-based company. the FireEye® Central Management Platforms CM Series are a set of management platforms that consolidate the management, reporting, and data sharing of FireEye products into a single, easily...

PT-2024-1470 · Fireeye · Fireeye Ex

Name of the Vulnerable Software and Affected Versions: FireEye EX version 9.0.3.936727 Description: The issue is related to Cross-Site Scripting XSS in FireEye EX. An attacker can exploit this by sending a specially crafted JavaScript payload via the type and s f name parameters to an authenticat...