Fortinet FortiWeb 5.1.2 < 5.3.5 Autolearn Configuration Multiple XSS

The remote FortiWeb device is running a software version greater than or equal to 5.1.2 and less than 5.3.5. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to improper validation of user-supplied input to the autolearn configuration page. An attacker can exploit...

Fortinet FortiWeb Multiple Reflected XSS Vulnerabilities (FG-IR-15-005)

Fortinet FortiWeb is prone to multiple reflected cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Fortinet FortiWeb Cross-Site Scripting Vulnerability

Fortinet FortiWeb is the United States of America Fitta Fortinet a protection, load balancing and acceleration of web applications, database information exchange between the web application layer firewall. A cross-site scripting vulnerability in Fortinet FortiWeb versions 5.1.2 through 5.3.4 allo...

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8619

Fortinet FortiWeb is affected by multiple XSS vulnerabilities in the autolearn configuration page for versions 5.1.2 through 5.3.4. The underlying issue is improper validation of user-supplied input on the autolearn page, enabling attackers to inject arbitrary script or HTML via unspecified vecto...

PT-2015-4061

Name of the Vulnerable Software and Affected Versions FortiWeb versions 5.1.2 through 5.3.4 Description A cross-site scripting XSS issue exists in the autolearn configuration page, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For FortiW...

CVE-2014-8619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Fortinet FortiWeb < 5.3.5 Multiple Vulnerabilities

The remote host running a version of FortiWeb prior to 5.3.5. It is, therefore, affected by multiple vulnerabilities : - A command injection vulnerability exists due to a flaw that occurs when an administrator is executing reports. An authenticated, remote attacker can exploit this to execute...

FortiWeb multiple vulnerabilities

...

FortiWeb 5.x < 5.1.0 XSS

Binary data 8650.prm...

Fortinet FortiWEB Detection via SSL/TLS

Binary data 8646.prm...

Fortinet FortiWEB Version Detection

Binary data 8648.prm...

Fortinet FortiWEB Detection via Telnet

Binary data 8647.prm...

FortiWeb < 5.2.0 Multiple XSRF Vulnerabilities

Binary data 8668.prm...

FortiWeb 5.x < 5.2.1 Multiple XSS Vulnerabilities

Binary data 8667.prm...

FortiWeb 5.x < 5.0.4 XSS

Binary data 8669.prm...

FortiWeb 4.x / 5.x < 5.0.3 Multiple Vulnerabilities

Binary data 8670.prm...

Fortinet FortiWeb Multiple XSS Vulnerabilities (FG-IR-14-012)

Fortinet FortiWeb is prone to multiple reflective cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...