Skip to content
Sign in
6.4 Medium

CVE-2021-41029 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version…

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWLM Versions not published

Other CVEs of Fortinet FortiWLM

The 8 CVEs of Fortinet FortiWLM →
CVE-2021-43070 Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and… 5.4 Medium CVE-2021-43077 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version… 8.8 High CVE-2021-43075 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 8.8 High CVE-2021-42752 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version… 5.4 Medium
Track this CVE