PT-2015-3371

Name of the Vulnerable Software and Affected Versions FortiOS version 5.0 Patch 7 build 4457 Description The issue is caused by insufficient protection of the web page structure, allowing remote authenticated users to inject arbitrary web script or HTML via the WTP Name or WTP Active Software...

CVE-2015-1451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via the 1 WTP Name or 2 WTP Active Software Version field in a CAPWAP Join request...