Total vulnerabilities in the database
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortios | 7.0.0 | 7.0.14 |
| fortinet / fortiproxy | 7.4.0 | 7.4.3 |
| fortinet / fortiproxy | 7.2.0 | 7.2.9 |
| fortinet / fortiproxy | 7.0.0 | 7.0.15 |
| fortinet / fortios | 7.2.0 | 7.2.8 |
| fortinet / fortios | 7.4.0 | 7.4.4 |