Lucene search

K
fortinetFortiGuard LabsFG-IR-20-098
HistoryOct 05, 2021 - 12:00 a.m.

FortiAnalyzer - XSS vulnerability observed in the Column settings of LogView

2021-10-0500:00:00
FortiGuard Labs
www.fortiguard.com
15
fortianalyzer
logview
xss
vulnerability
cwe-79
input
software

EPSS

0.001

Percentile

33.0%

An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.

EPSS

0.001

Percentile

33.0%

Related for FG-IR-20-098