Vulnetix
Try Vulnetix Request Demo
CVE-2024-31495 PUBLISHED CVSS 6.199999809265137 MEDIUM

An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.

EPSS 0.27% · 50.2th percentile

Risk Scores

CVSS v3.1
6.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
EPSS Score
0.27%
50.2th percentile

Affected Products

VendorProductVersions
FortinetFortiOS7.4.0, 7.2.0, 7.0.0
FortinetFortiProxy7.4.0, 7.2.0, 7.0.0
fortinetfortiproxy7.4.0, 7.2.0, 7.0.0
fortinetfortios7.4.0, 7.2.0, 7.0.0

Timeline

References

Open in Interactive Console →