CVE-2015-3612

5.4 mediumEPSS 0.8%

Medium (5.4) in fortinet fortimanager. EPSS 0.8% chance of exploitation in the next 30 days.

A Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimanager

References

http://www.securityfocus.com/bid/74444
http://www.securitytracker.com/id/1032188
https://fortiguard.com/psirt/FG-IR-15-011
https://fortiguard.com/psirt/FG-IR-15-011
https://fortiguard.com/psirt/FG-IR-15-011

Check your stack JSON