1192 matches found
Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability
Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...
Fortinet FortiAnalyzer Multiple Vulnerabilities in OpenSSL (FG-IR-14-018)
Fortinet FortiAnalyzer is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fortinet FortiAnalyzer Multiple XSS Vulnerabilities (FG-IR-14-033)
Fortinet FortiAnalyzer is prone to multiple cross-site- scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
Fortinet FortiAnalyzer Detection (SSH Login)
SSH login-based detection of Fortinet FortiAnalyzer. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fortinet FortiAnalyzer / FortiManager < 5.0.7 Multiple Unspecified XSS (FG-IR-14-033)
The remote host is running a version of FortiAnalyzer or FortiManager prior to 5.0.7. It is, therefore, affected by multiple unspecified cross-site scripting vulnerabilities due to the web UI not properly validating input before returning it to users. An attacker can exploit these vulnerabilities...
CVE-2014-2336
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...
CVE-2014-2334
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...
CVE-2014-2334
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336...
CVE-2014-2334
Fortinet FortiAnalyzer/FortiManager are affected by multiple XSS flaws (CVE-2014-2334, CVE-2014-2335, CVE-2014-2336). The issues affect FortiAnalyzer and FortiManager prior to version 5.0.7, with the Web UI failing to properly validate/sanitize user input in the affected components. CVE-2014-2336...
CVE-2014-2336
Fortinet FortiManager/ FortiAnalyzer are affected by multiple XSS vulnerabilities in their Web UI prior to version 5.0.7. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This set corresponds to CVE-2014-2334, CVE-2014-2335, and CVE-2014-2336. Expl...
CVE-2014-2336
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...
PT-2014-4630
Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions prior to 5.0.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web User Interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecifi...
PT-2014-4632
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...
CVE-2014-2336: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...
CVE-2014-2334: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336...
Multiple XSS vulnerabilities in FortiManager and FortiAnalyzer Web UI
...
Fortinet FortiAnalyzer < 4.3.7 / 5.0.5 Multiple XSRF
The remote host is running FortiAnalyzer prior to 4.3.7 / 5.0.5. It is, therefore, affected by multiple cross-site request forgery vulnerabilities due to a failure to validate XSRF tokens in several web UI scripts. An attacker could potentially exploit this vulnerability to hijack an authenticate...