CVE-2014-8617: XSS
Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8617?
CVE-2014-8617 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2014-8617?
To address CVE-2014-8617, it is recommended to upgrade Fortinet FortiMail to versions 4.3.9, 5.0.8, 5.1.5, or 5.2.3 or later.
What are the affected versions of Fortinet FortiMail for CVE-2014-8617?
CVE-2014-8617 affects Fortinet FortiMail versions prior to 4.3.9, all versions of 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3.
What type of vulnerability is CVE-2014-8617?
CVE-2014-8617 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
Who can be affected by CVE-2014-8617?
Users of Fortinet FortiMail who are running the vulnerable versions may be at risk of exploitation by attackers leveraging the XSS vulnerability.