CVE-2015-1880: XSS

Published May 12, 2015

Updated

Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

3 affected components

Fortinet FortiOS=5.2.0

Fortinet FortiOS=5.2.1

Fortinet FortiOS=5.2.2

Event History

May 12, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1880?

CVE-2015-1880 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2015-1880?

To mitigate CVE-2015-1880, upgrade Fortinet FortiOS to version 5.2.3 or later which includes the necessary patches.

What is affected by CVE-2015-1880?

CVE-2015-1880 affects Fortinet FortiOS versions 5.2.0 through 5.2.2.

What kind of attack does CVE-2015-1880 enable?

CVE-2015-1880 allows remote attackers to perform cross-site scripting (XSS) by injecting arbitrary web scripts or HTML into the sslvpn login page.

What vectors are involved in CVE-2015-1880?

CVE-2015-1880 exploits unspecified vectors to execute the cross-site scripting attacks on the sslvpn login page.