SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2022-24391

HIGH · CVSS 8.8 EPSS 0.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-05-17 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It involves a SQL injection risk.

CVE
CVE-2022-24391
Severity
HIGH
CVSS
8.8
EPSS
0.96%

Original NVD Description

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

Related CVEs

Other vulnerabilities affecting the same vendor(s)