An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.8Upgrade FortiProxy to 7.2.2Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Apr 11, 2023 |
| Fortios | — | Upgrade FortiOS to 7.2.4Upgrade FortiOS to 6.4.12Upgrade FortiOS to 6.2.13Upgrade FortiOS to 7.0.11 | Apr 20, 2023 | Apr 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub