Test ID:	1.3.6.1.4.1.25623.1.0.106581
Category:	Web application abuses
Title:	Accellion FTA Multiple Vulnerabilities
Summary:	Accellion FTA is prone to multiple vulnerabilities
Description:	Summary: Accellion FTA is prone to multiple vulnerabilities Vulnerability Insight: Accellion FTA is prone to multiple vulnerabilities: - Accellion FTP server only returns the username in the server response if the a username is invalid. An attacker may use this information to determine valid user accounts and enumerate them. (CVE-2016-9499) - Accellion FTP server uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting. (CVE-2016-9500) Affected Software/OS: Accellion FTA Version prior to 9_12_220. Solution: Upgrade to version 9_12_220 or later CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9499 BugTraq ID: 96154 https://www.securityfocus.com/bid/96154 CERT/CC vulnerability note: VU#745607 https://www.kb.cert.org/vuls/id/745607 https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf Common Vulnerability Exposure (CVE) ID: CVE-2016-9500
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.