CVE-2015-3620

Опубликовано: 12 мая 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/May/13
Exploit
Third Party Advisory
VDB Entry
http://www.fortiguard.com/advisory/FG-IR-15-005/
Vendor Advisory
http://www.securityfocus.com/archive/1/535452/100/0/threaded
http://www.securityfocus.com/bid/74646
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032262
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/May/13
Exploit
Third Party Advisory
VDB Entry
http://www.fortiguard.com/advisory/FG-IR-15-005/
Vendor Advisory
http://www.securityfocus.com/archive/1/535452/100/0/threaded
http://www.securityfocus.com/bid/74646
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032262
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.1:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00514

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gw6h-6rx4-wcrj

github

больше 3 лет назад