6.2
Medium
CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in…
Description
An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSOAR 7.6 | 7.6.0 → 7.6.1 | No fix stated |
| FortiSOAR 7.5 | 7.5.0 → 7.5.1 | No fix stated |
| FortiSOAR 7.4 | 7.4.0 → 7.4.5 | No fix stated |
| FortiSOAR 7.3 | 7.3.0 → 7.3.3 | No fix stated |
| FortiSOAR 7.2 | 7.2.0 → 7.2.2 | No fix stated |
| FortiSOAR 7.0 | 7.0.0 → 7.0.3 | No fix stated |
| FortiSOAR 6.4 | 6.4.0 → 6.4.4 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiSOAR
The 15 CVEs of FortiSOAR →
CVE-2024-48892
A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all…
6.4
Medium
CVE-2024-21760
An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4…
7.7
High
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Medium
CVE-2024-47572
An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker…
8.3
High