Skip to content
Sign in
7.2 High

CVE-2021-32585 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow…

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWAN Versions not published

Other CVEs of Fortinet FortiWAN

The 6 CVEs of Fortinet FortiWAN →
CVE-2021-26113 A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker… 6.2 Medium CVE-2021-32593 A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN… 6.5 Medium CVE-2021-24009 Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of… 7.2 High CVE-2021-26114 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may… 9.8 Critical
Track this CVE