CVE-2015-7363

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3 allows remote administrators to inject arbitrary web script or HTML via vectors related to report filters.

Weaknesses (CWE)

CWE-79

Affected Products (32)

fortinet · fortimanager_firmwarevulnerable

fortinet · fortimanager_firmware

References (8)

http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters

Vendor Advisory

http://www.securityfocus.com/bid/93413

http://www.securitytracker.com/id/1036981

http://www.securitytracker.com/id/1036982

http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters

Vendor Advisory

http://www.securityfocus.com/bid/93413

http://www.securitytracker.com/id/1036981

http://www.securitytracker.com/id/1036982