CVE-2021-24021

An improper neutralization of input vulnerability CWE-79 in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the column settings of Logview in FortiAnalyzer, should the...

PT-2021-15648

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 6.0.10 and below FortiAnalyzer versions 6.2.7 and below FortiAnalyzer versions 6.4.3 and below Description: The issue is related to an improper neutralization of input, which may allow a remote authenticated attacker to...

CVE-2021-24021: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input vulnerability CWE-79 in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the column settings of Logview in FortiAnalyzer, should the...

Fortinet FortiAnalyzer cross-site scripting vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...