Description
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSIEM | 7.4.0, 7.3.0 – ≤ 7.3.4, 7.2.0 – ≤ 7.2.6, 7.1.0 – ≤ 7.1.9, 7.0.0 – ≤ 7.0.4, 6.7.0 – ≤ 6.7.10, 6.6.0 – ≤ 6.6.5, 6.5.0 – ≤ 6.5.3, 6.4.0 – ≤ 6.4.4, 6.3.0 – ≤ 6.3.3, 6.2.0 – ≤ 6.2.1 | — |
Advisories 2
- WID-SEC-2026-2330 Fortinet FortiSIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2026
- NCSC-2026-0240 Kwetsbaarheden verholpen in meerdere Fortinet producten NCSC-NL (Netherlands) · Jul 15, 2026