FortiManager vulnerability

What happened

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Affected versions

FortiManager: 6.2.5; 6.2.0 through 6.2.3 (semver); 6.2.7 through 6.2.11 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.