Security Advisory

CVE-2026-12163

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-23 22:06:04
Last updated 2026-06-24 15:35:18
Assigner Fortra
CVSS score 5.5
State PUBLISHED

Description

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields could store script content that may be rendered as HTML instead of safely escaped text when the affected Asset View UI content is displayed.