Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-9500

The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

Description

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Accellion FTP Server

  • FTA_9_12_220 to < FTA_9_12_220affected

References