| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 6.0.0, < 6.2.8≥ 6.4.0, < 6.4.4 | 6.2.86.4.4 |
An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free