CVE-2024-0316

7.5 highEPSS 0.3%

High (7.5) in fireeye endpoint security. EPSS 0.3% chance of exploitation in the next 30 days.

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-460
Published: 2024-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fireeye:endpoint_security

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fireeye-products

Check your stack JSON