| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | ≥ 7.0.0, < 7.0.8≥ 7.2.0, < 7.2.2 | 7.0.87.2.2 |
An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free