VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2021-43081

CVE-2021-43081

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. and in FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0 web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Affected products

5
  • Fortinet/Fortiproxy3 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=2.0.0,<2.0.8
    • (no CPE)range: <=7.0.1, 2.0.0-2.0.7
    • (no CPE)range: FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0.
  • Fortinet/Fortios2 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.14
    • (no CPE)range: <=7.0.3, <=6.4.8, <=6.2.10, 6.0.0-6.0.14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.