FortiOS XSS vulnerabilities via User Groups & Config Revision Comments

2017-06-1500:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

39.7%

JSON

Two XSS vulnerabilities were reported to us affecting FortiOS that can be exploited to load and run a remote (malicious) Javascript in a logged in browser.

CPENameOperatorVersion
fortioseq5.4.4
fortioseq5.4.3
fortioseq5.4.2
fortioseq5.4.1
fortioseq5.4.0
fortioseq5.2.9
fortioseq5.2.8
fortioseq5.2.7
fortioseq5.2.6
fortioseq5.2.5