CVE-2014-8618

Fortinet FortiADC D models < 4.2 - Cross-Site Scripting in Theme Login Page

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models before 4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.fortiguard.com/advisory/FG-IR-15-005/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032265

Scores

EPSS 0.0026
EPSS Percentile 49.6%

Details

CWE
CWE-79
Status published
Products (6)
fortinet/fortiadc-1500d
fortinet/fortiadc-2000d
fortinet/fortiadc-200d
fortinet/fortiadc-4000d
fortinet/fortiadc-700d
fortinet/fortiadc_firmware < 4.1.0
Published May 12, 2015
Tracked Since Feb 18, 2026