CNVD-2025-00411 | Vulnetix

CNVD-2025-00411 PUBLISHED CVSS 6.400000095367432 MEDIUM

Record from circl · Published August 13, 2024

Fortinet FortiSOAR是美国飞塔（Fortinet）公司的一种安全编排、自动化和响应(SOAR) 解决方案。 Fortinet FortiSOAR存在跨站脚本漏洞，该漏洞源于在网页生成过程中输入不正确中和。远程攻击者可利用该漏洞通过通信模块注入任意Web脚本。

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
FortiSOAR	Fortinet	7.3.2, 7.2.2, 7.0.3, 6.4.4, 6.4.1

CVSS 3.1

6.400000095367432

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X

Vendor	Product	Versions
Fortinet	FortiSOAR	7.3.0, 6.4.3, 6.4.0

The same record, from the CLI:

vulnetix vdb vuln CNVD-2025-00411
vulnetix vdb fixes CNVD-2025-00411

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2025-00411/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart