CVE-2014-0331

MEDIUM · 4.3 CVSS Gepubliceerd: 10-04-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to gui_partA/.

Vendors

Fortinet

Affected products

Fortiadc Firmware Fortiadc-1000e Fortiadc-1500d Fortiadc-2000d Fortiadc-200d Fortiadc-300e Fortiadc-4000d Fortiadc-400e Fortiadc-600e

References

seclists.org
www.fortiguard.com
www.kb.cert.org
www.securityfocus.com
www.securitytracker.com