CVE-2012-0941: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...

PT-2012-5682

Name of the Vulnerable Software and Affected Versions Fortinet Fortigate UTM appliances affected versions not specified Description The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and the same private key across different customers'...