CVE-2016-9499
The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.
- State
- Published
- Severity
- Not scored
- Published
- Jul 13, 2018
- Updated
- Aug 6, 2024
- Reserved
- Nov 21, 2016
Description
Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
FTP ServerAccellion |
|
References
- https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf
- 96154vdb-entry
- VU#745607third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.