# CVE-2026-12163: Fortra File Integrity Monitoring stored XSS in Asset View UI

Source: https://junglewise.ai/threats/cve-2026-12163-fortra-file-integrity-monitoring-stored-xss-in-asset-view-ui  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2026-12163 · Severity: medium · CVSS 5.5 · Published 2026-06-23

Fortra File Integrity Monitoring (formerly Tripwire Enterprise) is used by organizations to track changes to critical system files and ensure security compliance. A vulnerability in the Asset View interface allows an authorized user with administrative-level permissions to inject malicious scripts into the system's configuration fields. If exploited, these scripts could execute in the browsers of other users, potentially leading to unauthorized actions or data access within the management console.

Vendors: [Fortra](https://junglewise.ai/threats/vendors/fortra).

## Quick answers

**Is CVE-2026-12163 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-12163 being exploited in the wild.

**How severe is CVE-2026-12163?** Medium severity, with a CVSS score of 5.5, published 23 June 2026.

**Which products and versions are affected?** Fortra File Integrity Monitoring prior to 9.4.0.1; Fortra Tripwire Enterprise prior to 9.4.0.1.

**Is there a fix for CVE-2026-12163?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-12163 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-12163?** Check whether you run Fortra File Integrity Monitoring or Fortra Tripwire Enterprise at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stored cross-site scripting (XSS) vulnerability exists in the Asset View UI component of Fortra File Integrity Monitoring (FIM). The flaw is caused by improper neutralization of input during web page generation (CWE-79) within node or database configuration fields. An authenticated attacker with high privileges (PR:H) can inject malicious scripts into these fields. When another user views the affected Asset View UI, the application fails to safely escape the stored content, leading to script execution in the context of the victim's session. This vulnerability is addressed in version 9.4.0.1.

## Affected products

- Fortra File Integrity Monitoring (FIM) / Tripwire Enterprise prior to 9.4.0.1

## Timeline

- 2026-06-23: disclosed
- 2026-06-23: advisory

## References

- [https://www.fortra.com/security/advisories/product-security/fi-2026-009](https://www.fortra.com/security/advisories/product-security/fi-2026-009)

## Related threats

- [Fortra File Integrity Monitoring incorrect privilege assignment in tetool import](https://junglewise.ai/threats/cve-2026-12164-fortra-file-integrity-monitoring-incorrect-privilege-assignment)