CVE-2015-7676 - Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files

Back Back to CVE browser

MEDIUM

Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files

Published Apr 15, 2016

5.4

MEDIUM

CVSS 3.0

EPSS 1.78%

Description

Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html
x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2016/Jan/95
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/90574
vdb-entryx_refsource_BID
https://profundis-labs.com/advisories/CVE-2015-7676.txt
x_refsource_MISCExploit

Link	Providers	Tags
http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html		x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2016/Jan/95		mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/90574		vdb-entryx_refsource_BID
https://profundis-labs.com/advisories/CVE-2015-7676.txt		x_refsource_MISCExploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 15, 2016

Updated Aug 6, 2024

Reserved Oct 2, 2015

Link CVE-2015-7676

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-7676

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-7676