CVE-2014-2335: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2335?
CVE-2014-2335 is classified as a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary web script or HTML.
How do I fix CVE-2014-2335?
To fix CVE-2014-2335, upgrade the Fortinet FortiManager firmware to version 5.0.7 or later.
What are the consequences of an exploit of CVE-2014-2335?
Exploiting CVE-2014-2335 can lead to unauthorized actions being taken in the context of a user's session, potentially compromising sensitive data.
Which software versions are affected by CVE-2014-2335?
CVE-2014-2335 affects Fortinet FortiManager versions prior to 5.0.7, including all versions up to and including 5.0.6.
What type of vulnerabilities does CVE-2014-2335 include?
CVE-2014-2335 includes multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface.