| IR Number | FG-IR-20-122 |
| Date | Feb 3, 2021 |
| Severity |
Medium |
| CVSSv3 Score | 4.6 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2021-22122 |
| Affected Products |
FortiWeb
:
6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.1, 6.3.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0
|
| CVRF | Download |
| Language |
Refine Search
PSIRT Advisories
XSS vulnerability in FortiWeb
Summary
An improper neutralization of input during web page generation in FortiWeb GUI interface may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.Affected Products
FortiWeb versions 6.3.13 and below.FortiWeb versions 6.2.4 and below.
Solutions
Please upgrade to FortiWeb versions 6.3.14 or above.Please upgrade to FortiWeb versions 6.2.5 or above.