Vulnerability Details CVE-2016-8494
Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.6%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
Products affected by CVE-2016-8494
-
cpe:2.3:a:fortinet:connect:14.10
-
cpe:2.3:a:fortinet:connect:14.2
-
cpe:2.3:a:fortinet:connect:15.10
-
cpe:2.3:a:fortinet:connect:16.7