Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11…
Priority LOW 27CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack.
Why it matters now
EPSS 0.01177 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:* | 5.0.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:* | 5.0.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:* | 5.0.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:* | 5.0.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:* | 5.0.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:* | 5.0.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:* | 5.0.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:* | 5.0.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:* | 5.2.1 | Vulnerable | Fortinet |
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:* Versions 5.0.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:* Versions 5.0.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:* Versions 5.0.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:* Versions 5.0.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:* Versions 5.0.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:* Versions 5.2.1 Vulnerable ·Fortinet
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:fortinet:fortimanager_2000e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortimanager_200d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortimanager_3000f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortimanager_300e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortimanager_3900e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortimanager_400e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
- cpe:2.3:h:fortinet:fortimanager_2000e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortimanager_200d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortimanager_3000f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortimanager_300e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortimanager_3900e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortimanager_400e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3615
- 2026-10-03 Alias added: GHSA-hv39-2fmf-jg4m
References
More Fortinet Fortimanager Firmware vulnerabilities
- TI-2015-03057 SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before… CVSS 3.0CRITICAL 9.8
- TI-2015-03055 Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to… CVSS 3.0HIGH 7.5
- TI-2016-07000 Information disclosure in Fortinet FortiManager CVSS 3.0HIGH 7.4
- TI-2015-03058 Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain… CVSS 3.0HIGH 7.8
- TI-2017-12818 Cross-site scripting in Fortinet FortiManager, FortiAnalyzer CVSS 3.0MEDIUM 6.1
- TI-2017-02346 Open redirect in Fortinet FortiAnalyzer, FortiManager CVSS 3.0MEDIUM 6.1
Sources
- CVE-2015-3615 · CVE Program
- CVE-2015-3615 · NVD
- FIRST EPSS
- GHSA-hv39-2fmf-jg4m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences