1265 matches found
CVE-2015-8037
Fortinet FortiManager GUI (pre-5.2.4) is affected by CVE-2015-8037 due to two XSS vectors in SOMVpnSSLPortalDialog and FGDMngUpdHistory. Remote attackers can inject arbitrary web script/HTML. Remediation: upgrade FortiManager to version 5.2.4 or later (as indicated by the affected range). The sou...
CVE-2015-8038
Fortinet FortiManager GUI is affected by multiple XSS vulnerabilities in versions prior to 5.2.4, allowing remote attackers to inject arbitrary web script or HTML via the sharedjobmanager or SOMServiceObjDialog components. The issue is rooted in the FortiManager GUI (not a backend service) and th...
CVE-2015-8037
Multiple cross-site scripting XSS vulnerabilities in the Graphical User Interface GUI in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 SOMVpnSSLPortalDialog or 2 FGDMngUpdHistory...
CVE-2015-8038
Multiple cross-site scripting XSS vulnerabilities in the Graphical User Interface GUI in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sharedjobmanager or 2 SOMServiceObjDialog...
Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager
Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment and management...
Fortinet FortiManager FortiOS 5.0.x >= 5.0.3 and < 5.0.11 Dataset Reports XSS
The Fortinet FortiManager FortiOS version running on the remote host is 5.x greater than or equal to 5.0.3 and prior to 5.0.11. It is, therefore, affected by a cross-site scripting vulnerability in the advanced dataset reports page due to a failure to properly sanitize user-supplied input to the...
Fortinet FortiManager GUI Cross-Site Scripting Vulnerability
Fortinet FortiManager is a centralized device management application. A cross-site scripting vulnerability exists in the Fortinet FortiManager SOMVpnSSLPortalDialog and FGDMngUpdHistory functions, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...
FortiManager 5.2.2 -持久型 XSS 漏洞
2 个确定了存在的XSS: 在SOMVpnSSLPortalDialog XSS漏洞。 在FGDMngUpdHistory XSS漏洞。 图形用户界面GUIFortiManager v5.2.3是容易的 一个反射 XSS 漏洞和一个存储 XSS 漏洞。 另外 2 个确定了存在的XSS: 在sharedjobmanager XSS漏洞。 在SOMServiceObjDialog XSS漏洞。 受影响的产品 XSS项目1 - 2:FortiManager v5.2.2或更早。 XSS项目3 - 4:FortiManager v5.2.3或更早。...
FortiManager 5.2.2 - Persistent Cross-Site Scripting
FortiManager 5.2.2 - Persistent Cross-Site Scripting + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================...
FortiManager 5.2.2 - Persistent Cross-Site Scripting
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...
FortiManager 5.2.2 - Persistent XSS Vulnerabilities
Exploit for cgi platform in category web applications Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security management appliance that allows you to centrally manage any number of Fortinet...
FortiManager 5.2.2 Cross Site Scripting
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...
Multiple XSS vulnerabilities in FortiManager GUI
...
Fortinet FortiManager 5.0.x < 5.0.11 / 5.2.x < 5.2.2 Multiple Vulnerabilities (FG-IR-15-011)
The remote host is running a version of FortiManager that is 5.0.x prior to 5.0.11 or 5.2.x prior 5.2.2. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an unauthenticated, remote attacker to inject arbitrary OS commands. CVE-2015-3611 - A...
Fortigate FortiManager 1000D Multiple Privilege Escalation Vulnerabilities
FortiManager Security Management appliances allow you to centrally manage any number of Fortinet Network Security devices,from several to thousands, including FortiGate®, FortiWiFi™, and FortiCarrier™. Fortimanager is vulnerable to multiple privilege escalation attacks, including root jailbreak...
CVE-2015-3620
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-3620
CVE-2015-3620 is a cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer FortiOS (5.0.x < 5.0.11) and FortiManager FortiOS (5.0.3–5.0.10, 5.2.x View Dataset page. It arises from improper sanitization of input to the sql-query parameter, allowing remote, unauthenticated attackers ...
CVE-2015-3620
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability
Document Title: =============== Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSI...