CVE-2014-0331

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortiadc Firmware
Fortiadc-1000e
Fortiadc-1500d
Fortiadc-2000d
Vendor
CVE Published:
10 April 2014

Summary

Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to gui_partA/.

References

http://www.kb.cert.org/vuls/id/667340
third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id/1030018
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/66642
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.