3 matches found
CVE-2012-6347
Multiple cross-site scripting XSS vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to 1 admin/auditTrail.jsf, 2 mapolicymgmt/targetsMonitorView.jsf, 3...
CVE-2012-6347: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to 1 admin/auditTrail.jsf, 2 mapolicymgmt/targetsMonitorView.jsf, 3...
PT-2018-4055
Name of the Vulnerable Software and Affected Versions FortiGate FortiDB versions prior to 4.4.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in Java number format exception handling. Remote attackers can inject arbitrary web script or HTML via the...