CVE-2016-9500

Description

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

Affected products

• Accellion / FTP ServerFTA_9_12_220 – FTA_9_12_220

References

• MISChttps://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf
• MISChttps://www.securityfocus.com/bid/96154
• MISChttps://www.kb.cert.org/vuls/id/745607