| IR Number | FG-IR-21-222 |
| Date | Sep 6, 2022 |
| Severity |
Medium |
| CVSSv3 Score | 4.5 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2021-43080 |
| Affected Products |
FortiOS
:
7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0
FortiProxy
:
7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 2.0.8, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.1, 2.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiOS -- XSS vulnerability observed in External Connectors Of Security Fabric
Summary
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack through the URI parameter via the Threat Feed IP address section of the Security Fabric External connectors.
Affected Products
FortiOS verion 7.2.0.
FortiOS version 6.4.0 through 6.4.9
FortiOS version 7.0.0 through 7.0.5
Solutions
Please upgrade to FortiOS version 6.4.10 or above.
Please upgrade to FortiOS version 7.0.6 or above.
Please upgrade to FortiOS version 7.2.1 or above.