Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2021-24021 An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below…

Description

An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiAnalyzer Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiAnalyzer

Les 3 CVE de Fortinet FortiAnalyzer →
CVE-2020-12814 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version… 4.1 Moyenne CVE-2020-12817 An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote… Non notée
Suivre cette CVE