CVE-2026-12163
Stored XSS in Fortra File Integrity Monitoring (FIM)
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields could store script content that may be rendered as HTML instead of safely escaped text when the affected Asset View UI content is displayed.
| CWE | CWE-79 |
| Vendor | fortra |
| Product | file integrity monitoring (fim) |
| Published | Jun 23, 2026 |
| Last Updated | Jun 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for fortra file integrity monitoring (fim)
Be the first to know when new medium vulnerabilities affecting fortra file integrity monitoring (fim) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Fortra / File Integrity Monitoring (FIM)
0 < 9.4.0.1