NVD

Id
19030  
Name
CVE-2016-3196  
Description
Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-08-05  
Modified Date
2016-08-23  
Seq
2016-3196  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
105557 19030 CVE-2016-3196 http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability  View
105558 19030 CVE-2016-3196 20160801 Fortinet FortiManager & FortiAnalyzer - (filename) Persistent Web Vulnerability  View
105559 19030 CVE-2016-3196 20160801 Fortinet FortiManager & FortiAnalyzer - (filename) Persistent Web Vulnerability  View
105560 19030 CVE-2016-3196 92203  View
105561 19030 CVE-2016-3196 1036551  View
105562 19030 CVE-2016-3196 http://www.vulnerability-lab.com/get_content.php?id=1687  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3387 JVNDB-2016-004160 Fortinet FortiAnalyzer および FortiManager におけるクロスサイトスクリプティングの脆弱性 Fortinet FortiAnalyzer および FortiManager には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-3196 89702 CVE-2016-3196 19030 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004160.html 2016-07-14 2016-08-09 View