VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2014· Updated Jun 17, 2026

CVE-2014-4738

CVE-2014-4738

Description

Multiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) user/ldap_user/check_dlg or (2) user/radius_user/check_dlg.

Affected products

11
  • Fortinet/Fortiweb11 versions
    cpe:2.3:a:fortinet:fortiweb:5.0.0:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:fortinet:fortiweb:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:5.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <5.2.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.