Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Feb 26, 2026
CVE-2025-58324
CVE-2025-58324
Description
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.
Affected products
1- Fortinet/FortiSIEMv5cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*Range: 7.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.