CoreCVE
Back

MEDIUM

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler

Published Dec 8, 2021

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner fortinet
Published Dec 8, 2021
Updated Oct 25, 2024
Reserved Sep 13, 2021
Link CVE-2021-41015

CISA Vulnrichment

Updated Oct 23, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2021-41015

Red Hat

No data

ENISA EUVD

Assigner fortinet
Published Dec 8, 2021
Updated Oct 25, 2024
Link EUVD-2021-28168

GitHub

No data