4.3
CVSSv2

CVE-2015-3620

Published: 12/05/2015 Updated: 09/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 up to and including 5.0.10 and 5.2.0 up to and including 5.2.1 and FortiManager 5.0.3 up to and including 5.0.10 and 5.2.0 up to and including 5.2.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortimanager firmware 5.0.4

fortinet fortimanager firmware 5.0.5

fortinet fortimanager firmware 5.2.1

fortinet fortimanager firmware 5.0.8

fortinet fortimanager firmware 5.0.9

fortinet fortimanager firmware 5.0.6

fortinet fortimanager firmware 5.0.7

fortinet fortimanager firmware 5.0.3

fortinet fortimanager firmware 5.0.10

fortinet fortimanager firmware 5.2.0

fortinet fortianalyzer firmware 5.0.10

fortinet fortianalyzer firmware 5.2.0

fortinet fortianalyzer firmware 5.0.0

fortinet fortianalyzer firmware 5.0.1

fortinet fortianalyzer firmware 5.2.1

Exploits

Fortinet FortiAnalyzer and FortiManager suffer from a client-side cross site scripting vulnerability ...