TI-2024-00289 CVE-2024-0315 · GHSA-m68q-hfcj-vq23
Remote file inclusion vulnerability in FireEye Central Management
Priority LOW 34
Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704.
FireEye
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
FireEye records in CISA KEVNo FireEye vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2024-00290 CVE-2024-0316 · GHSA-359j-4p99-7w98
Improper cleanup vulnerability in FireEye Endpoint Security
Priority LOW 33
Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244.
TI-2021-09895 CVE-2021-28970 · GHSA-872j-g9cc-m6pq
eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote…
Priority LOW 32
eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature.
TI-2021-09894 CVE-2021-28969 · GHSA-f4g4-33pr-68pc
eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct…
Priority LOW 32
eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature.
TI-2020-15296 CVE-2020-25034 · GHSA-hp2r-fcg4-4v89
eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to…
Priority LOW 32
eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature.
TI-2024-00294 CVE-2024-0320 · GHSA-ggw5-hfxp-7276
Cross-site scripting in FireEye Malware Analysis
Priority LOW 27
Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530.
TI-2024-00293 CVE-2024-0319 · GHSA-p532-r78r-7ww3
Open redirect in FireEye HXTool
Priority LOW 27
Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malicious page by changing the 'redirect_uri' parameter.
TI-2024-00292 CVE-2024-0318 · GHSA-wxfr-mg44-v48j
Cross-site scripting in FireEye HXTool
Priority LOW 27
Cross-Site Scripting in FireEye HXTool affecting version 4.6.
TI-2024-00291 CVE-2024-0317 · GHSA-g566-qqx6-fg4r
Cross-site scripting in FireEye EX
Priority LOW 27
Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727.
TI-2024-00288 CVE-2024-0314 · GHSA-mprg-3w6p-hrm6
Cross-site scripting in FireEye Central Management
Priority LOW 27
XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking.