PT-2026-24249
CVE-2026-25972
·
Publicado
2026-03-10
·
Atualizado
2026-03-17
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Fortinet FortiSIEM versions 7.3.0 through 7.3.4
Fortinet FortiSIEM version 7.4.0
Description
The software contains a flaw related to improper neutralization of input during web page generation, which can lead to cross-site scripting. A remote, unauthenticated attacker may be able to provide arbitrary data, potentially enabling a social engineering attack through manipulated URL parameters.
Recommendations
Fortinet FortiSIEM versions 7.3.0 through 7.3.4 should be updated.
Fortinet FortiSIEM version 7.4.0 should be updated.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾