GCVE - cpe:2.3:a:fidelissecurity:deception:9.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fidelissecurity:deception:9.4:*:*:*:*:*:*:*

part: a version: 9.4 update: *

Vendor	Fidelissecurity (`bb402e23-6dc0-5965-b13c-224d138fbaa0`)
Product	Deception (`09345d56-6d32-507f-aa04-7701f2a8315e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-35049`	vulnerable	2026-06-08 05:32:17.566467	Command Injection Vulnerability in Fidelis Network and Deception CRITICAL (9.9) Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response in an authenticated session. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.7 and in version 9.4. Patches and updates are available to address this vulnerability. Published: 2021-06-25T11:44:45.218Z Updated: 2024-09-16T23:10:59.157Z Open on db.gcve.eu Reference links https://support.fidelissecurity.com/hc/en-us/categories/360001842694-Advisories-News-and-Policies https://www.securifera.com/blog/2021/06/24/operation-eagle-eye/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35048`	vulnerable	2026-06-08 05:32:17.565961	Unauthenticated SQL Injection Vulnerability in Fidelis Network and Deception CRITICAL (9.8) Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some versions of Fidelis software. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.7 and in version 9.4. Patches and updates are available to address this vulnerability. Published: 2021-06-25T11:44:25.422Z Updated: 2024-09-17T02:46:55.900Z Open on db.gcve.eu Reference links https://support.fidelissecurity.com/hc/en-us/categories/360001842694-Advisories-News-and-Policies https://www.securifera.com/blog/2021/06/24/operation-eagle-eye/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35047`	vulnerable	2026-06-08 05:32:17.564184	Privileged Command Injection Vulnerability in Fidelis Network and Deception CRITICAL (9.9) Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring Fidelis components. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.7 and in version 9.4. Patches and updates are available to address this vulnerability. Published: 2021-06-25T11:44:30.916Z Updated: 2024-09-16T20:41:47.623Z Open on db.gcve.eu Reference links https://support.fidelissecurity.com/hc/en-us/categories/360001842694-Advisories-News-and-Policies https://www.securifera.com/blog/2021/06/24/operation-eagle-eye/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.