Lucene search

K
fortinetFortiGuard LabsFG-IR-21-139
HistoryDec 07, 2021 - 12:00 a.m.

FortiWeb - Reflected cross-site scripting in SAML login

2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
19

0.002 Low

EPSS

Percentile

52.2%

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWeb may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests to the SAML login webpage.

CPENameOperatorVersion
fortiwebeq6.4.1
fortiwebeq6.4.0

0.002 Low

EPSS

Percentile

52.2%

Related for FG-IR-21-139