low2.2
CVE-2024-27780
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all v…
Impact
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisiem | from 6.7.0 through 6.7.9 from 7.0.0 through 7.0.3 from 7.1.0 through 7.1.8 |