Skip to content
Sign in
6.4 Medium

CVE-2023-26211 An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0…

Description

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module.

Affected products and versions

Product Affected versions Fixed in
FortiSOAR 7.3 7.3.0 → 7.3.2 No fix stated
FortiSOAR 7.2 7.2.0 → 7.2.2 No fix stated
FortiSOAR 7.0 7.0.0 → 7.0.3 No fix stated
FortiSOAR 6.4 6.4.0 → 6.4.4 No fix stated

Other CVEs of FortiSOAR

The 15 CVEs of FortiSOAR →
CVE-2024-48892 A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all… 6.4 Medium CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in… 6.2 Medium CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4… 7.7 High CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium
Track this CVE