6.4
Moyenne
CVE-2021-41029 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version…
Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiWLM | Versions non publiées |
Autres CVE de Fortinet FortiWLM
Les 8 CVE de Fortinet FortiWLM →
CVE-2021-43070
Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and…
5.4
Moyenne
CVE-2021-43077
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version…
8.8
Élevée
CVE-2021-43075
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…
8.8
Élevée
CVE-2021-42752
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version…
5.4
Moyenne