CVE-2015-3612

A Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2020-02-04

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Fortimanager (Fortinet)

References

• http://www.securityfocus.com/bid/74444
• http://www.securitytracker.com/id/1032188
• https://fortiguard.com/psirt/FG-IR-15-011