Medium severity6.1NVD Advisory· Published Jul 13, 2018· Updated Jun 17, 2026
CVE-2016-9500
CVE-2016-9500
Description
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:accellion:ftp_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:accellion:ftp_server:*:*:*:*:*:*:*:*range: <fta_9_12_220
- (no CPE)range: < FTA_9_12_220
- Accellion/FTP Serverv5Range: FTA_9_12_220
Patches
Vulnerability mechanics
References
3- www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdfnvdExploitThird Party Advisory
- www.kb.cert.org/vuls/id/745607nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/96154nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.