An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-280 | Vendor Advisory |
Configurations
History
14 Oct 2025, 20:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:* | |
| First Time |
Fortinet fortisiem
Fortinet |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-280 - Vendor Advisory |
14 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-14 16:15
Updated : 2025-10-14 20:25
NVD link : CVE-2025-58324
Mitre link : CVE-2025-58324
CVE.ORG link : CVE-2025-58324
JSON object : View
Products Affected
fortinet
- fortisiem
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')