Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336.
References
- http://www.fortiguard.com/advisory/FG-IR-14-033/
- 61309 third-party-advisory
- fortimanageranalyzer-cve20142334-xss(98477) vdb-entry
- 70887 vdb-entry