Cross-Site Scripting Vulnerabilities in Fortinet FortiAnalyzer
CVE-2014-2334

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortianalyzer Firmware
Vendor
CVE Published:
31 October 2014

Summary

The Web User Interface of Fortinet FortiAnalyzer versions prior to 5.0.7 contains multiple vulnerabilities related to Cross-Site Scripting (XSS). These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through unspecified vectors, posing significant risks to users by potentially compromising their sessions and sensitive information.

References

http://www.fortiguard.com/advisory/FG-IR-14-033/
x_refsource_CONFIRM
http://secunia.com/advisories/61309
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/98477
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.