CyberSec.Space Logo
Back to CVE Browser

CVE-2014-0331

MEDIUM
4.3
CVSS Severity Score
EPSS Score0.1000%
EPSS Percentile12.39th
PublishedApr 10, 2014
Last ModifiedMay 6, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to gui_partA/.

Affected Platforms (CPE)

💻
Fortinet

Fortiadc Firmware

<= 3.2.0
🔌
Fortinet

Fortiadc 1000e

All versions
🔌
Fortinet

Fortiadc 1500d

All versions
🔌
Fortinet

Fortiadc 2000d

All versions
🔌
Fortinet

Fortiadc 200d

All versions
🔌
Fortinet

Fortiadc 300e

All versions
🔌
Fortinet

Fortiadc 4000d

All versions
🔌
Fortinet

Fortiadc 400e

All versions
🔌
Fortinet

Fortiadc 600e

All versions

References & Advisories

🔗 http://seclists.org/fulldisclosure/2014/Apr/53
🔗 http://www.fortiguard.com/advisory/FG-IR-14-004
🔗 http://www.kb.cert.org/vuls/id/667340
🔗 http://www.securityfocus.com/bid/66642
🔗 http://www.securitytracker.com/id/1030018
🔗 http://seclists.org/fulldisclosure/2014/Apr/53
🔗 http://www.fortiguard.com/advisory/FG-IR-14-004
🔗 http://www.kb.cert.org/vuls/id/667340

Related Vulnerabilities

CVE-2014-85826.4

FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to o...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...