CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure
MediumCVSS 6.1
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| accellion ftp server | < fta_9_12_220 | fta_9_12_220 |
| accellion ftp server | >= FTA_9_12_220, < FTA_9_12_220 | FTA_9_12_220 |
References
- VU#745607 third-party-advisory us-government-resource
- www.qualys.com exploit third-party-advisory
- 96154 third-party-advisory vdb-entry