medium4.3Public exploit code
CVE-2015-8037
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to injec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FortiManager 5.2.2 - Persistent Cross-Site Scripting2015-09-25 · webapps · cgi
Impact
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SOMVpnSSLPortalDialog or (2) FGDMngUpdHistory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimanager Firmware | through 5.2.3 |