CVE-2016-9500CWE-80

The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

published July 13, 2018

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05435 · 92.6th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure
    cvelistv5