VULNERABILITY INTELLIGENCE

CVE-2015-1451

CVSS score3.5 LOW

EPSS probability0.98%

CISA KEVNot currently listed

Published2015-02-02

Last modified2026-06-17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the (1) WTP Name or (2) WTP Active Software Version field in a CAPWAP Join request.