Skip to content
Back to search

CVE-2015-1880

MEDIUM
4.3NVD

Summary

generated automatically from NVD data

Fortinet FortiOS 5.2.x contains a cross-site scripting (CWE-79) flaw in its sslvpn login page. Remote attackers could use it to inject arbitrary web script or HTML, though the specific vectors are not disclosed. NVD lists the affected releases as 5.2.0, 5.2.1 and 5.2.2, and rates the issue 4.3 (MEDIUM) under CVSS v2.0 with the vector AV:N/AC:M/Au:N/C:N/I:P/A:N.

NVD description

Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Share:

EPSS · FIRST.org

14.2%probability of exploitation in the next 30 days

Higher than 96% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v2.0 Score

4.3
/ 10.0
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N

Information

Published
12 mai 2015
Updated
17 juin 2026
Status
Modified
Source
cve@mitre.org

Affected products

fortinet fortiosAll Fortinet FortiOS CVEs →
Versions : 5.2.0, 5.2.1, 5.2.2

Weaknesses (CWE)

CWE-79

References (12)

Similar CVEs

Other vulnerabilities of type CWE-79

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring