XSS vulnerability observed in External Connectors Of Security Fabric Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-21-222 Final 1 1 2022-09-06T00:00:00 Current version 2022-09-06T00:00:00 2022-09-06T00:00:00 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack through the URI parameter via the Threat Feed IP address section of the Security Fabric External connectors. None Execute unauthorized code or commands FortiOS verion 7.2.0.FortiOS version 6.4.0 through 6.4.9FortiOS version 7.0.0 through 7.0.5FortiProxy version 7.0.0 through 7.0.4FortiProxy version 2.0.0 through 2.0.8 Please upgrade to FortiOS version 6.4.10 or above.Please upgrade to FortiOS version 7.0.6 or above.Please upgrade to FortiOS version 7.2.1 or above.Please upgrade to FortiProxy version 7.2.0 or abovePlease upgrade to FortiProxy version 7.0.5 or above Fortinet is pleased to thank Massimiliano Ferraresi, Massimiliano Brolli and TIM Security Red Team Research from TIM for reporting this vulnerability under responsible disclosure. CVE-2021-43080 4.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:F/RL:X/RC:X https://fortiguard.fortinet.com/psirt/FG-IR-21-222 XSS vulnerability observed in External Connectors Of Security Fabric Reference>