medium4.3
CVE-2015-1880
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script…
Impact
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | Versions 5.2.0, 5.2.1, 5.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- http://www.securityfocus.com/bid/74652
- http://www.securitytracker.com/id/1032261
- http://www.securitytracker.com/id/1032262
- http://www.securitytracker.com/id/1032264
- http://www.securitytracker.com/id/1032265
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- http://www.securityfocus.com/bid/74652
- http://www.securitytracker.com/id/1032261
- http://www.securitytracker.com/id/1032262
- http://www.securitytracker.com/id/1032264
- http://www.securitytracker.com/id/1032265