Cross site scripting

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

Remote file inclusion

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

CVE-2024-0316

CVE-2024-0316 affects FireEye Endpoint Security (Trellix) 5.2.0.958244. The issue is described as an improper cleanup in exceptions thrown, enabling an attacker to send multiple requests to the containment_notify/preview parameter and potentially cause a service outage. Connected sources confirm ...

CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

CVE-2024-0315

CVE-2024-0315 affects FireEye/Central Management (version 9.1.1.956704). A remote file inclusion flaw in the report creation workflow allows an attacker to upload a malicious PDF to the system. Documented impact indicates high confidentiality, integrity, and availability risks (per CVSS details i...

CVE-2024-0314 XSS vulnerability in FireEye Central Management

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

CVE-2024-0314

CVE-2024-0314 is a reflected XSS vulnerability in FireEye Central Management (v9.1.1.956704). The issue allows an attacker to modify HTML elements in the application, enabling session hijacking. Documents consistently describe XSS in the affected FireEye Central Management product; no explicit ro...

CVE-2024-0314 XSS vulnerability in FireEye Central Management

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...

CVE-2024-0319: URL Redirection to Untrusted Site

Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malicious page by changing the 'redirecturi' parameter...

PT-2024-15466 · Fireeye · Fireeye Hxtool

Name of the Vulnerable Software and Affected Versions: FireEye HXTool version 4.6 Description: This issue allows an attacker to store a specially crafted JavaScript payload in the Profile Name and Hostname/IP parameters. The payload will be triggered when items are loaded, potentially leading to...

PT-2024-15468 · Fireeye · Fireeye Malware Analysis

Name of the Vulnerable Software and Affected Versions: FireEye Malware Analysis AX version 9.0.3.936530 Description: The issue allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. This is achieved by...

FireEye HXTool Cross-Site Scripting Vulnerability

FireEye HXTool is an extended user interface for FireEye. A cross-site scripting vulnerability exists in FireEye HXTool version 4.6, which stems from a cross-site scripting vulnerability. The vulnerability allows an attacker to store a specially crafted JavaScript payload in the "Profile Name" an...

CVE-2024-0318: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded...

FireEye HXTool Input Validation Error Vulnerability

FireEye HXTool is an extended user interface for FireEye. An input validation error vulnerability exists in FireEye HXTool version 4.6, which stems from an open redirection vulnerability. This vulnerability can be exploited to redirect a legitimate user to a malicious page by changing the...

CVE-2024-0317: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 'sfname' parameters to an authenticated user to retrieve their session details...

PT-2024-1470 · Fireeye · Fireeye Ex

Name of the Vulnerable Software and Affected Versions: FireEye EX version 9.0.3.936727 Description: The issue is related to Cross-Site Scripting XSS in FireEye EX. An attacker can exploit this by sending a specially crafted JavaScript payload via the type and s f name parameters to an authenticat...

Mainway FireEye EX Cross-Site Scripting Vulnerability

Mainway FireEye EX is an all-in-one platform for enterprise security from Mainway, a China-based company. the FireEye® Central Management Platforms CM Series are a set of management platforms that consolidate the management, reporting, and data sharing of FireEye products into a single, easily...