CVE-2014-2336

no score yetEPSS 1.8%

Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortianalyzer_firmware
fortinet:fortimanager

References

http://secunia.com/advisories/61309
http://www.fortiguard.com/advisory/FG-IR-14-033/
http://www.securityfocus.com/bid/70889
https://exchange.xforce.ibmcloud.com/vulnerabilities/98479
http://secunia.com/advisories/61309

Check your stack JSON