Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields could store script content that may be rendered as HTML instead of safely escaped text when the affected Asset View UI content is displayed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-12163 Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset… https://www.cve.org/CVERecord?id=CVE-2026-12163
Post summary
The post announces CVE-2026-12163 and details a stored XSS vulnerability in Fortra FIM, but it does not provide any PoC, exploit code, active exploitation evidence, or patch information.
🚨*CVE* CVE-2026-12163 Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset… https://www.cve.org/CVERecord?id=CVE-2026-12163 ----- Traducción: CVE-2026-12163 For… http://infoflow.cloud`
Post summary
A new CVE (CVE‑2026‑12163) exposes a stored XSS flaw in Fortra FIM versions prior to 9.4.0.1, with no PoC, exploit, patch, or active exploitation details shared.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fortra | file_integrity_monitoring | - | - | - |