1506 matches found
Fortinet FortiManager FortiOS 5.0.x >= 5.0.3 and < 5.0.11 Dataset Reports XSS
The Fortinet FortiManager FortiOS version running on the remote host is 5.x greater than or equal to 5.0.3 and prior to 5.0.11. It is, therefore, affected by a cross-site scripting vulnerability in the advanced dataset reports page due to a failure to properly sanitize user-supplied input to the...
Fortinet FortiManager GUI Cross-Site Scripting Vulnerability
Fortinet FortiManager is a centralized device management application. A cross-site scripting vulnerability exists in the Fortinet FortiManager SOMVpnSSLPortalDialog and FGDMngUpdHistory functions, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...
FortiManager 5.2.2 -持久型 XSS 漏洞
2 个确定了存在的XSS: 在SOMVpnSSLPortalDialog XSS漏洞。 在FGDMngUpdHistory XSS漏洞。 图形用户界面GUIFortiManager v5.2.3是容易的 一个反射 XSS 漏洞和一个存储 XSS 漏洞。 另外 2 个确定了存在的XSS: 在sharedjobmanager XSS漏洞。 在SOMServiceObjDialog XSS漏洞。 受影响的产品 XSS项目1 - 2:FortiManager v5.2.2或更早。 XSS项目3 - 4:FortiManager v5.2.3或更早。...
FortiManager 5.2.2 - Persistent Cross-Site Scripting
FortiManager 5.2.2 - Persistent Cross-Site Scripting + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================...
FortiManager 5.2.2 - Persistent Cross-Site Scripting
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...
FortiManager 5.2.2 - Persistent XSS Vulnerabilities
Exploit for cgi platform in category web applications Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security management appliance that allows you to centrally manage any number of Fortinet...
FortiManager 5.2.2 Cross Site Scripting
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FORTIMANAGER-XSS-0924.txt Vendor: ================================ www.fortinet.com Product: ================================ FortiManager v5.2.2 FortiManager is a centralized security...
Multiple XSS vulnerabilities in FortiManager GUI
...
Fortinet FortiManager 5.0.x < 5.0.11 / 5.2.x < 5.2.2 Multiple Vulnerabilities (FG-IR-15-011)
The remote host is running a version of FortiManager that is 5.0.x prior to 5.0.11 or 5.2.x prior 5.2.2. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an unauthenticated, remote attacker to inject arbitrary OS commands. CVE-2015-3611 - A...
Fortigate FortiManager 1000D Multiple Privilege Escalation Vulnerabilities
FortiManager Security Management appliances allow you to centrally manage any number of Fortinet Network Security devices,from several to thousands, including FortiGate®, FortiWiFi™, and FortiCarrier™. Fortimanager is vulnerable to multiple privilege escalation attacks, including root jailbreak...
CVE-2015-3620
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-3620
CVE-2015-3620 is a cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer FortiOS (5.0.x < 5.0.11) and FortiManager FortiOS (5.0.3–5.0.10, 5.2.x View Dataset page. It arises from improper sanitization of input to the sql-query parameter, allowing remote, unauthenticated attackers ...
CVE-2015-3620
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability
Document Title: =============== Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSI...
Fortinet FortiAnalyzer and FortiManager crossite scripting
Crossite scripting in web interface...
CVE-2015-3620: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability
Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...
Fortinet FortiAnalyzer / FortiManager Cross Site Scripting
Document Title: =============== Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSI...
Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability
Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...