NVD

Id
85581  
Name
CVE-2017-8760  
Description
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-05-27  
Published
2017-05-05  
Modified Date
2017-05-17  
Seq
2017-8760  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67660 JVNDB-2017-003949 Accellion FTA デバイスの courier/1000@/index.html におけるクロスサイトスクリプティングの脆弱性 Accellion FTA デバイスの courier/1000@/index.html には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-8760 0 CVE-2017-8760 85581 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003949.html 2017-05-06 2017-06-12 View