cvelist/2015/3xxx/CVE-2015-3620.json

{
    "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-3620",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "n/a",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "n/a"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "n/a"
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "n/a"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "name": "http://www.fortiguard.com/advisory/FG-IR-15-005/",
                "refsource": "CONFIRM",
                "url": "http://www.fortiguard.com/advisory/FG-IR-15-005/"
            },
            {
                "name": "20150505 Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability",
                "refsource": "FULLDISC",
                "url": "http://seclists.org/fulldisclosure/2015/May/13"
            },
            {
                "name": "http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html",
                "refsource": "MISC",
                "url": "http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html"
            },
            {
                "name": "20150505 Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability",
                "refsource": "BUGTRAQ",
                "url": "http://www.securityfocus.com/archive/1/535452/100/0/threaded"
            },
            {
                "name": "74646",
                "refsource": "BID",
                "url": "http://www.securityfocus.com/bid/74646"
            },
            {
                "name": "1032262",
                "refsource": "SECTRACK",
                "url": "http://www.securitytracker.com/id/1032262"
            }
        ]
    }
}