CVE-2024-0318

CVE-2024-0318 (FireEye HXTool) affects FireEye HXTool version 4.6. A stored Cross-Site Scripting vulnerability exists in the Profile Name and Hostname/IP fields, enabling a crafted JavaScript payload to execute when items are loaded. This is evidenced across multiple sources (NVD entry and relate...

CVE-2024-0319

CVE-2024-0319 affects FireEye HXTool version 4.6 and manifests as an open redirect through manipulation of the redirect_uri parameter. The vulnerability description identifies the issue as an open redirect, enabling an attacker to steer a legitimate user to a malicious page. No concrete exploit d...