CVEvulnerability
CVE-2014-1458
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• fortinet fortiweb (<= 5.0.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.fortiguard.com/advisory/FG-IR-14-001/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90978 exchange.xforce.ibmcloud.com
- http://www.fortiguard.com/advisory/FG-IR-14-001/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90978 exchange.xforce.ibmcloud.com