CVE-2014-8619: XSS
Published May 12, 2015
·Updated
Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
13 affected components
Fortinet FortiWeb=5.1.2
Fortinet FortiWeb=5.1.3
Fortinet FortiWeb=5.1.4
Fortinet FortiWeb=5.2.0
Fortinet FortiWeb=5.2.1
Fortinet FortiWeb=5.2.2
Fortinet FortiWeb=5.2.3
Fortinet FortiWeb=5.2.4
Fortinet FortiWeb=5.3.0
Fortinet FortiWeb=5.3.1
Fortinet FortiWeb=5.3.2
Fortinet FortiWeb=5.3.3
Fortinet FortiWeb=5.3.4
Event History
May 12, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8619?
CVE-2014-8619 has a medium severity rating due to its cross-site scripting potential.
2
How do I fix CVE-2014-8619?
To fix CVE-2014-8619, upgrade FortiWeb to version 5.3.5 or later.
3
What does CVE-2014-8619 affect?
CVE-2014-8619 affects Fortinet FortiWeb versions 5.1.2 through 5.3.4.
4
Can CVE-2014-8619 be exploited remotely?
Yes, remote attackers can exploit CVE-2014-8619 through the autolearn configuration page.
5
What type of vulnerability is CVE-2014-8619?
CVE-2014-8619 is a cross-site scripting (XSS) vulnerability.