XSS vulnerability in the FortiManager via the buffer parameter


An improper neutralization of input vulnerability in FortiManager GUI may allow an authenticated attacker to perform an XSS (Cross Site Scripting) attack via the buffer parameter.

Affected Products

FortiManager 6.2.1 and below


Upgrade to FortiManager 6.2.2 or above


Fortinet is pleased to thank Patrick Nielsen for reporting this vulnerability under responsible disclosure.