← CVE Intelligence

CVE-2026-25972

Fortinet / FortiSIEM PUBLISHED

Description (CNA)

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiSIEMaffected 7.4.0; affected 7.3.0 through 7.3.4

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.