FortiAnalyzer - XSS vulnerability

2021-11-0200:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

22.7%

JSON

An improper neutralization of input during web page generation [CWE-79] in FortiAnalyzer may allow an attacker to perform a stored Cross Site Scripting (XSS) attack via specifically crafted requests to the web GUI.

CPENameOperatorVersion
fortianalyzereq6.4.4
fortianalyzereq6.0.6
fortianalyzereq6.0.5
fortianalyzereq6.0.4
fortianalyzereq6.0.3
fortianalyzereq6.0.2
fortianalyzereq6.0.1
fortianalyzereq6.0.0

Name	Operator	Version
fortianalyzer	eq	6.4.4
fortianalyzer	eq	6.0.6
fortianalyzer	eq	6.0.5
fortianalyzer	eq	6.0.4
fortianalyzer	eq	6.0.3
fortianalyzer	eq	6.0.2
fortianalyzer	eq	6.0.1
fortianalyzer	eq	6.0.0

0.001 Low

EPSS

Percentile

22.7%

JSON

Related for FG-IR-20-092