Skip to content
OpenAdvisories
High · 7.2 CVE-2021-32585 EUVD-2021-19425GHSA-8w42-c82m-92px

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to per…

Published Apr 6, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWAN Category: Network devices

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWAN FortiWAN before 4.5.9 —

References