Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2014-2336

Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335.

  • Published: Oct 31, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-2336
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortimanager - 5.0.6.x
fortinet / fortianalyzer_firmware - 5.0.6.x