CVE-2015-1880
medium · 4.3A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVSS
14.2%
EPSS (exploit prob.)
96th
EPSS percentile
2015-05-12
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| fortinet | fortios | 5.2.0 |
| fortinet | fortios | 5.2.1 |
| fortinet | fortios | 5.2.2 |
Check a specific version with /api/v1/cve/match.
References
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- http://www.securityfocus.com/bid/74652
- http://www.securitytracker.com/id/1032261
- http://www.securitytracker.com/id/1032262
- http://www.securitytracker.com/id/1032264
- http://www.securitytracker.com/id/1032265
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- http://www.securityfocus.com/bid/74652
- http://www.securitytracker.com/id/1032261
- http://www.securitytracker.com/id/1032262
- http://www.securitytracker.com/id/1032264
- http://www.securitytracker.com/id/1032265
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2015-1880