Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-0320 EUVD-2024-16116GHSA-ggw5-hfxp-7276

Cross-Site Scripting in FireEye Malware Analysis (AX)

Published Jan 15, 2024 · Updated Jun 3, 2025 · Assigned by INCIBE

Description

Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user.

Affected products

VendorProductAffectedFixed
FireEye FireEye Malware Analysis (AX) 9.0.3.936530 —

References