CVE-2024-0320: Cross-Site Scripting in FireEye Malware Analysis (AX)
Published Jan 15, 2024
·Updated
Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user.
Affected Software
1 affected component
FireEye Malware Analysis=9.0.3.936530
Remediation
Information
The FireEye team is working on fixing the reported vulnerabilities. It is recommended to update affected products to the latest version available.
Event History
Jan 15, 2024
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-0320?
CVE-2024-0320 is considered a high severity vulnerability due to its potential for Cross-Site Scripting attacks.
2
How do I fix CVE-2024-0320?
To fix CVE-2024-0320, upgrade FireEye Malware Analysis to the latest version that addresses this vulnerability.
3
Which versions are affected by CVE-2024-0320?
CVE-2024-0320 affects FireEye Malware Analysis version 9.0.3.936530.
4
What type of vulnerability is CVE-2024-0320?
CVE-2024-0320 is classified as a Cross-Site Scripting vulnerability.
5
What can an attacker achieve with CVE-2024-0320?
An attacker exploiting CVE-2024-0320 can retrieve session details of a legitimate user.