CVE Program partner

Fidelis

Fidelis Security, LLC

API
CVEs, 365 days013 all time, 0 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationFidelis Security, LLC
RoleCNA
TypeVendor
Reports tomitre
ScopeFidelis issues only.
Advisorieshttps://support.fidelissecurity.com/hc/en-us/categories/360001842694-Advisories-News-and-Policies

Latest CVEs · RSS

  • CVE-2022-0486 2022-05-17 · CVSS 4.4
    Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, adminis
  • CVE-2022-0997 2022-05-17 · CVSS 3.9
    Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative a
  • CVE-2022-24388 2022-05-17 · CVSS 8.8
    Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPo
  • CVE-2022-24389 2022-05-17 · CVSS 8.8
    Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception Com
  • CVE-2022-24390 2022-05-17 · CVSS 8.8
    Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Decepti
  • CVE-2022-24391 2022-05-17 · CVSS 8.8
    Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerabil
  • CVE-2022-24392 2022-05-17 · CVSS 8.8
    Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value fo
  • CVE-2022-24393 2022-05-17 · CVSS 8.8
    Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” v
  • CVE-2022-24394 2022-05-17 · CVSS 8.8
    Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value
  • CVE-2021-35049 2021-06-25 · CVSS 9.9
    Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a sp
  • CVE-2021-35050 2021-06-25 · CVSS 6.5
    User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost,
  • CVE-2021-35047 2021-06-25 · CVSS 9.9
    Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inj
  • CVE-2021-35048 2021-06-25 · CVSS 9.8
    Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to expo

All CVE Program partners