Description (CNA)
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSIEM | affected 7.1.0 through 7.1.7; affected 7.0.0 through 7.0.3; affected 6.7.0 through 6.7.9 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.