https://vulnogram.org/ Most recent CVEs assigned by Fidelis Security, LLC (fidelis). https://vulnogram.org/seaview/icons/fidelis.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2022-0486 https://vulnogram.org/CVE-2022-0486 Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equ… Medium Tue, 17 May 2022 19:32:58 GMT https://vulnogram.org/CVE-2022-0997 https://vulnogram.org/CVE-2022-0997 Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands… Low Tue, 17 May 2022 19:31:43 GMT https://vulnogram.org/CVE-2022-24388 https://vulnogram.org/CVE-2022-24388 Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. T… High Tue, 17 May 2022 19:30:26 GMT https://vulnogram.org/CVE-2022-24389 https://vulnogram.org/CVE-2022-24389 Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis compone… High Tue, 17 May 2022 19:28:43 GMT https://vulnogram.org/CVE-2022-24390 https://vulnogram.org/CVE-2022-24390 Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis c… High Tue, 17 May 2022 19:27:50 GMT https://vulnogram.org/CVE-2022-24391 https://vulnogram.org/CVE-2022-24391 Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updat… High Tue, 17 May 2022 19:26:54 GMT https://vulnogram.org/CVE-2022-24392 https://vulnogram.org/CVE-2022-24392 Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to… High Tue, 17 May 2022 19:26:01 GMT https://vulnogram.org/CVE-2022-24393 https://vulnogram.org/CVE-2022-24393 Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP requ… High Tue, 17 May 2022 19:24:36 GMT https://vulnogram.org/CVE-2022-24394 https://vulnogram.org/CVE-2022-24394 Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP reque… High Tue, 17 May 2022 19:22:26 GMT https://vulnogram.org/CVE-2021-35049 https://vulnogram.org/CVE-2021-35049 Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return resu… Critical Fri, 25 Jun 2021 11:44:45 GMT https://vulnogram.org/CVE-2021-35050 https://vulnogram.org/CVE-2021-35050 User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is… Medium Fri, 25 Jun 2021 11:44:36 GMT https://vulnogram.org/CVE-2021-35047 https://vulnogram.org/CVE-2021-35047 Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring Fidelis components. The vulnera… Critical Fri, 25 Jun 2021 11:44:30 GMT https://vulnogram.org/CVE-2021-35048 https://vulnogram.org/CVE-2021-35048 Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some versions of Fidelis software. The vulnerability is p… Critical Network Exploitable Fri, 25 Jun 2021 11:44:25 GMT