CVE-2015-1880

Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

14.16% chance of exploitation in the next 30 days, 97th percentile

Nuclei

medium · CWE-79

Published

2015-05-12

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1880.yaml

Security advisories

• http://www.fortiguard.com/advisory/FG-IR-15-005
• http://www.securityfocus.com/bid/74652
• http://www.securitytracker.com/id/1032261
• http://www.securitytracker.com/id/1032262
• http://www.securitytracker.com/id/1032264
• http://www.securitytracker.com/id/1032265

References

• CVE Record
• NVD entry