VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 11, 2025· Updated Jun 17, 2026

CVE-2023-37933

CVE-2023-37933

Description

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through 7.2.1 and before 7.1.3 allows an authenticated attacker to perform an XSS attack via crafted HTTP or HTTPs requests.

Affected products

4
  • Fortinet/Fortiadc 200d3 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.3.0,<7.1.4
    • cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*range: 7.4.0
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: 7.4.0, 7.2.0-7.2.1, <7.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.