Aller au contenu
Se connecter
4.2 Moyenne

CVE-2021-26087 An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below,…

Description

An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a stored cross site scripting attack (XSS) via injecting malicious payloads in different locations.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiWLC 8.6.0 Pas de correctif indiqué
FortiWLC 8.5 8.5.0 → 8.5.3 Pas de correctif indiqué
FortiWLC 8.4 8.4.0 → 8.4.8 Pas de correctif indiqué
FortiWLC 8.3.3 Pas de correctif indiqué

Autres CVE de FortiWLC

Les 5 CVE de FortiWLC →
CVE-2021-22126 A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3… 6.5 Moyenne CVE-2021-32584 An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and… 4.8 Moyenne CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Moyenne CVE-2021-26093 An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a… 6.6 Moyenne
Suivre cette CVE