CoreCVE
Back

MEDIUM

An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests

Published Aug 12, 2025

Description

An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests

Affected products

Remediation

Vendor solution

Please upgrade to FortiSOAR version 7.6.2 or above Please upgrade to FortiSOAR version 7.5.2 or above

Metrics

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner fortinet
Published Aug 12, 2025
Updated Aug 13, 2025
Reserved Apr 14, 2025
Link CVE-2025-32932
CISA Vulnrichment
Updated Aug 13, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-32932
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-32932