CVE-2014-8618: XSS
Published May 12, 2015
·Updated
Cross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models before 4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
6 affected components
Fortinet Fortiadc Firmware<=4.1.0
Fortinet Fortiadc-1500d
Fortinet Fortiadc-2000d
Fortinet Fortiadc-200d
Fortinet Fortiadc-4000d
Fortinet Fortiadc-700d
Event History
May 12, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8618?
CVE-2014-8618 is considered a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2014-8618?
To fix CVE-2014-8618, upgrade Fortinet FortiADC D models to firmware version 4.2 or higher.
3
What is impacted by CVE-2014-8618?
CVE-2014-8618 affects Fortinet FortiADC D models with firmware versions earlier than 4.2.
4
Can CVE-2014-8618 lead to unauthorized access?
Yes, CVE-2014-8618 can allow remote attackers to inject arbitrary web scripts, potentially leading to unauthorized access.
5
Is CVE-2014-8618 a known vulnerability?
Yes, CVE-2014-8618 is a known vulnerability that has been documented and assigned a CVE identifier for tracking.