Security Advisory

CVE-2024-0318

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-15 16:26:50
Last updated 2024-10-23 15:28:55
Assigner INCIBE
State PUBLISHED

Description

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the Profile Name and Hostname/IP parameters that will be triggered when items are loaded.