CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

2018-07-1320:00:00

CWE-80

certcc

www.cve.org

0.002 Low

EPSS

Percentile

51.6%

JSON

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

CNA Affected

[
  {
    "product": "FTP Server",
    "vendor": "Accellion",
    "versions": [
      {
        "lessThan": " FTA_9_12_220",
        "status": "affected",
        "version": " FTA_9_12_220",
        "versionType": "custom"
      }
    ]
  }
]