CVE-2015-1880

MEDIUM 4.3CVE-2015-1880 · Published 12/05/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

fortiguard.com/advisory/FG-IR-15-005 · Vendor Advisory
securityfocus.com/bid/74652 · Third Party Advisory
securitytracker.com/id/1032261 · Third Party Advisory
securitytracker.com/id/1032262 · Third Party Advisory
securitytracker.com/id/1032264 · Third Party Advisory
securitytracker.com/id/1032265 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free