← Database

CVE-2009-4647

MEDIUM CVSS: 4.3 Published: 2010-02-19 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not properly handled when the administrator views audit logs.

Affected Platforms

Accellion Secure File Transfer Appliance

Weakness Type

CWE-79

References