| Package | Affected versions | Patched versions |
|---|---|---|
| fortisoar | = 7.2.0≥ 7.0.0, ≤ 7.0.3 |
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free