Unscored severity · published May 12, 2015
CVE-2015-1880
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
14.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiOS · Fortinet
5.2.0; 5.2.1; 5.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1880
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1880
Vendor Advisory
http://www.fortiguard.com/advisory/FG-IR-15-005/
Third Party Advisory
http://www.securityfocus.com/bid/74652
Third Party Advisory
http://www.securitytracker.com/id/1032261
Third Party Advisory
http://www.securitytracker.com/id/1032262
Third Party Advisory
http://www.securitytracker.com/id/1032264
Third Party Advisory
http://www.securitytracker.com/id/1032265
More from FortiOS
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
9.8
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.8
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
9.8
CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability