CVE-2014-2336 in FortiAnalyzer
Сводка (Английский)
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
12.03.2014
Раскрытие
31.10.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 68104 | Fortinet FortiAnalyzer/FortiManager Reflected межсайтовый скриптинг | 79 | Высокий | Официальное исправление | CVE-2014-2336 |