CVE-2016-9500

MEDIUM

Accellion FTP Server < FTA_9_12_220 - Cross-Site Scripting via Accusoft Prizm Content Flash Parameters

Title source: llm

Description

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

References (3)

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

https://www.securityfocus.com/bid/96154

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

https://www.kb.cert.org/vuls/id/745607

Scores

CVSS v3 6.1

EPSS 0.0544

EPSS Percentile 91.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-80 CWE-79

Status published

Products (1)

accellion/ftp_server < fta_9_12_220

Published Jul 13, 2018

Tracked Since Feb 18, 2026