CVE-2017-8760

An issue was discovered on Accellion FTA devices before FTA_9_12_180

published May 5, 2017

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01230 · 68.5th percentile
Published
2017-05-05T18:00Z
EPSS history
Timeline
  • 05 MAY 18:00Z
    An issue was discovered on Accellion FTA devices before FTA_9_12_180
    cvelistv5