CVE-2016-9500

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cret@cert.org

Published

2018-07-13

Last modified

2024-08-06

Weaknesses

CWE-79, CWE-80

Affected products

• Ftp Server (Accellion)

References

• https://www.kb.cert.org/vuls/id/745607
• https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf
• https://www.securityfocus.com/bid/96154