CVE-2016-9500

Name of the Vulnerable Software and Affected Versions Accellion FTP server versions prior to FTA 9 12 220

Description The issue concerns the use of the Accusoft Prizm Content flash component in the Accellion FTP server, which contains multiple parameters, such as customTabCategoryName and customButton1Image, that are vulnerable to cross-site scripting.

Recommendations For Accellion FTP server versions prior to FTA 9 12 220, update to version FTA 9 12 220 or later to resolve the issue. As a temporary workaround, consider restricting access to the parameters customTabCategoryName and customButton1Image to minimize the risk of exploitation.