CVE-2022-24391

8.8 highEPSS 1.0%

High (8.8) in fidelissecurity. EPSS 1.0% chance of exploitation in the next 30 days.

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-05-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fidelissecurity:deception
fidelissecurity:network

References

https://fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411
https://fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411

Check your stack JSON