vulnerability

Fortinet FortiManager: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2018-1351)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Jun 28, 2018
Added
Jul 26, 2021
Modified
Nov 27, 2024

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log.

Solutions

fortinet-fortimanager-upgrade-6_0_0fortinet-fortimanager-upgrade-6_0_1

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today