https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0320.htmlhttps://patchthecve.com/cve/CVE-2024-0320.htmlWed, 17 Jun 2026 06:53:16 +0000MEDIUM 5.4: Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user.https://patchthecve.com/cve/CVE-2024-0319.htmlhttps://patchthecve.com/cve/CVE-2024-0319.htmlWed, 17 Jun 2026 06:53:16 +0000MEDIUM 5.4: Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malicious page by changing the 'redirect_uri' parameter.https://patchthecve.com/cve/CVE-2024-0318.htmlhttps://patchthecve.com/cve/CVE-2024-0318.htmlWed, 17 Jun 2026 06:53:15 +0000MEDIUM 5.4: Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded.https://patchthecve.com/cve/CVE-2024-0317.htmlhttps://patchthecve.com/cve/CVE-2024-0317.htmlWed, 17 Jun 2026 06:53:15 +0000MEDIUM 5.4: Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.https://patchthecve.com/cve/CVE-2024-0316.htmlhttps://patchthecve.com/cve/CVE-2024-0316.htmlWed, 17 Jun 2026 06:53:15 +0000MEDIUM 6.8: Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.https://patchthecve.com/cve/CVE-2024-0315.htmlhttps://patchthecve.com/cve/CVE-2024-0315.htmlWed, 17 Jun 2026 06:53:15 +0000MEDIUM 6.6: Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process.https://patchthecve.com/cve/CVE-2024-0314.htmlhttps://patchthecve.com/cve/CVE-2024-0314.htmlWed, 17 Jun 2026 06:53:15 +0000MEDIUM 5.4: XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking.