Description
Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- 20150505 Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability mailing-list
- http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html
- 20150505 Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability mailing-list
- 74646 vdb-entry
- 1032262 vdb-entry