CVE-2012-6347

Multiple cross-site scripting XSS vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to 1 admin/auditTrail.jsf, 2 mapolicymgmt/targetsMonitorView.jsf, 3...