CVE-2016-3978
Last modified
CVE-2016-3978 is a vulnerability of currently unknown severity. The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via the "redirect" parameter to "login.". EPSS estimates a 6.33% chance of exploitation in the next 30 days.
Description
The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via the "redirect" parameter to "login."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortios | 5.0.0 |
| Fortinet | Fortios | 5.0.1 |
| Fortinet | Fortios | 5.0.2 |
| Fortinet | Fortios | 5.0.3 |
| Fortinet | Fortios | 5.0.4 |
| Fortinet | Fortios | 5.0.5 |
| Fortinet | Fortios | 5.0.6 |
| Fortinet | Fortios | 5.0.7 |
| Fortinet | Fortios | 5.0.8 |
| Fortinet | Fortios | 5.0.9 |
| Fortinet | Fortios | 5.0.10 |
| Fortinet | Fortios | 5.0.11 |
| Fortinet | Fortios | 5.0.12 |
| Fortinet | Fortios | 5.2.0 |
| Fortinet | Fortios | 5.2.1 |
| Fortinet | Fortios | 5.2.2 |
| Fortinet | Fortios | 5.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-3978?
How severe is CVE-2016-3978?
How do I fix CVE-2016-3978?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-3972Directory traversal vulnerability in the dotTailLogServlet i…
- CVE-2016-3973The chat feature in the Real-Time Collaboration (RTC) servic…5.3
- CVE-2016-3974XML external entity (XXE) vulnerability in the Configuration…9.1
- CVE-2016-3975Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS…6.1
- CVE-2016-3976Directory traversal vulnerability in SAP NetWeaver AS Java 7…7.5
- CVE-2016-3977Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in g…
- CVE-2016-3979Internet Communication Manager (aka ICMAN or ICM) in SAP JAV…
- CVE-2016-3980The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 t…
- CVE-2016-3981Heap-based buffer overflow in the bmp_read_rows function in …
- CVE-2016-3982Off-by-one error in the bmp_rle4_fread function in pngxrbmp.…
- CVE-2016-3983McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might …
- CVE-2016-3984The McAfee VirusScan Console (mcconsol.exe) in McAfee Active…
Are you affected by CVE-2016-3978?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST