Unrated severityNVD Advisory· Published Mar 11, 2025· Updated Feb 26, 2026

CVE-2023-37933

Description

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through 7.2.1 and before 7.1.3 allows an authenticated attacker to perform an XSS attack via crafted HTTP or HTTPs requests.

Affected products

Fortinet/Fortiadc 200dcpe-rescue
cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*
Range: 7.4.0
Fortinet/Fortiadc 300ellm-fuzzy
Range: <7.1.3, 7.2.0-7.2.1, 7.4.0

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-23-216mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000