CVE-2014-0331

CVE Database · CVE-2014-0331

CVE-2014-0331

· N/AModified

CVSS v3.1

N/A

EPSS

1.86%

Published

Apr 10, 2014

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to gui_partA/.

Weaknesses (CWE)

CWE-79

Affected Products (9)

fortinet · fortiadc_firmwarevulnerable

fortinet · fortiadc-1000evulnerable

fortinet · fortiadc-1500dvulnerable

fortinet · fortiadc-2000dvulnerable

fortinet · fortiadc-200dvulnerable

fortinet · fortiadc-300evulnerable

fortinet · fortiadc-4000dvulnerable

fortinet · fortiadc-400evulnerable

fortinet · fortiadc-600evulnerable

References (10)

http://seclists.org/fulldisclosure/2014/Apr/53

Exploit

http://www.fortiguard.com/advisory/FG-IR-14-004

Vendor Advisory

http://www.kb.cert.org/vuls/id/667340

http://www.securityfocus.com/bid/66642

http://www.securitytracker.com/id/1030018