| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | ≥ 7.0.0, < 7.0.15≥ 7.2.0, < 7.2.9≥ 7.4.0, < 7.4.3 | 7.0.157.2.97.4.3 |
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free