CVE-2026-12163
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
45/100
Published: 2026-06-23
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
Required
S:
Changed
C:
Low
I:
Low
A:
None
Description
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields could store script content that may be rendered as HTML instead of safely escaped text when the affected Asset View UI content is displayed.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| fortra | file_integrity_monitoring | < 9.4.0.1 |
References & Advisories (1)
Vendor Advisory