An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.17Upgrade FortiProxy to 7.2.10Upgrade FortiProxy to 7.4.4Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Jul 9, 2024 |
| Fortios | — | Upgrade FortiOS to 7.4.4Upgrade FortiOS to 7.0.14Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.2.8 | Jul 28, 2025 | Jul 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub