VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 11, 2025· Updated Feb 12, 2025

CVE-2024-27780

CVE-2024-27780

Description

Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Fortinet/FortiSIEMllm-fuzzy2 versions
    >=6.7, <7.2+ 1 more
    • (no CPE)range: >=6.7, <7.2
    • (no CPE)range: 7.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.