Back to feed
EUVD-2024-16113 · Published Jan 15, 2024
Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.
Technologies
Fireeye Ex 3500 FirmwareFireeye Ex 8500 FirmwareFireeye Ex 8500Fireeye Ex 5500 FirmwareaFireeye Ex 3500Fireeye Ex 5500
Weaknesses
CWE-79
CVSS scores
- v3.16.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
