Fidelis Deception
Approved changes feed: RSS · Atom
cpe:2.3:a:fidelis_cybersecurity:fidelis_deception:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fidelis Cybersecurity (088f06ce-cd43-5db6-b871-db1a86bb95f6) |
|---|---|
| Product | Fidelis Deception (24306f9d-f2a9-549f-baa9-52998a8ce72d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24394 |
vulnerable | 2026-06-08 05:41:00.243053 |
Authenticated Command Injection Vulnerability in Fidelis Network and Deception
HIGH (8.8)
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response via an authenticated session. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Published: 2022-05-17T19:22:26.993Z
Updated: 2024-09-17T03:59:09.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24393 |
vulnerable | 2026-06-08 05:41:00.242535 |
Authenticated Command Injection Vulnerability in Fidelis Network and Deception
HIGH (8.8)
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response via an authenticated session. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Published: 2022-05-17T19:24:36.438Z
Updated: 2024-09-16T23:00:32.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24392 |
vulnerable | 2026-06-08 05:41:00.242100 |
Authenticated Command Injection Vulnerability in Fidelis Network and Deception
HIGH (8.8)
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response via an authenticated session. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Published: 2022-05-17T19:26:01.470Z
Updated: 2024-09-16T16:12:26.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24391 |
vulnerable | 2026-06-08 05:41:00.241532 |
Authenticated SQL Injection Vulnerability in Fidelis Network and Deception
HIGH (8.8)
Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Published: 2022-05-17T19:26:54.874Z
Updated: 2024-09-16T23:26:20.130Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24390 |
vulnerable | 2026-06-08 05:41:00.241000 |
Authenticated Command Injection Vulnerability in Fidelis Network and Deception
HIGH (8.8)
Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Published: 2022-05-17T19:27:50.200Z
Updated: 2024-09-16T16:47:38.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24389 |
vulnerable | 2026-06-08 05:41:00.240446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24388 |
vulnerable | 2026-06-08 05:41:00.238549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0997 |
vulnerable | 2026-06-08 05:39:11.633142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0486 |
vulnerable | 2026-06-08 05:39:10.126072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35050 |
vulnerable | 2026-06-08 05:32:17.567215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35049 |
vulnerable | 2026-06-08 05:32:17.566428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35048 |
vulnerable | 2026-06-08 05:32:17.565913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35047 |
vulnerable | 2026-06-08 05:32:17.563022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.