Security Advisory

CVE-2024-0318

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-15 16:26:50

Last updated 2024-10-23 15:28:55

Assigner INCIBE

CVSS score 5.4

State PUBLISHED

Description

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded.

← Browse all CVEs View on cve.org ↗