Cross-Site Scripting Vulnerabilities in Fortinet FortiManager Web Interface
CVE-2014-2335

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortianalyzer Firmware
Vendor
CVE Published:
31 October 2014

Summary

Fortinet FortiManager has multiple cross-site scripting (XSS) vulnerabilities in its Web User Interface that allow remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. These vulnerabilities can potentially be exploited to compromise user accounts or execute unauthorized actions within the application, posing a significant security risk.

References

http://www.fortiguard.com/advisory/FG-IR-14-033/
x_refsource_CONFIRM
http://secunia.com/advisories/61309
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/98478
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.