PT-2014-4632 · Fortinet · Fortianalyzer Firmware+1

Publicado 2014-10-31 · Atualizado 2017-08-29 · CVE-2014-2336

NVD

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-2336

Produtos afetados

Fortianalyzer Firmware

Fortimanager

Referências · 5

• http://fortiguard.com/advisory/FG-IR-14-033 · Aviso do Fabricante
• http://secunia.com/advisories/61309 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2336 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98479 · Nota
• http://securityfocus.com/bid/70889 · Nota