Not rated
CVE-2019-17651 An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance…
Description
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiSIEM | Versions not published |
Other CVEs of Fortinet FortiSIEM
The 4 CVEs of Fortinet FortiSIEM →
CVE-2022-26119
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to…
7.8
High
CVE-2019-17653
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a…
Not rated
CVE-2019-16153
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow…
Not rated