Lucene search
HistoryOct 31, 2014 - 2:55 p.m.
CVE-2014-2336
cve-2014-2336
cross-site scripting
xss
fortinet
fortimanager
fortianalyzer
security vulnerability
nvd
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.1%
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335.
Affected configurations
Node
fortinetfortimanagerRange≤5.0.6
ORfortinetfortianalyzer_firmwareRange≤5.0.6
Related
prion
prion
Cross site scripting
2014-10-31 14:55:00
Cross site scripting
2014-10-31 14:55:00
Cross site scripting
2014-10-31 14:55:00
nvd
nvd
cvelist
cvelist
nessus
nessus
openvas
openvas
Fortinet FortiAnalyzer Multiple XSS Vulnerabilities (FG-IR-14-033)
2015-02-11 00:00:00
cve
cve
CVE-2014-2334
2014-10-31 14:55:02
CVE-2014-2335
2014-10-31 14:55:02
fortinet
fortinet
Multiple XSS vulnerabilities in FortiManager and FortiAnalyzer Web UI
2014-10-30 00:00:00
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2014-2336