http://packetstormsecurity.com/files/131766/Fortinet-FortiAnalyzer-FortiManager-Cross-Site-Scripting.html

20150505 Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability

http://www.fortiguard.com/advisory/FG-IR-15-005/

74646

1032262

The Fortinet FortiManager FortiOS version running on the remote host is 5.x greater than or equal to 5.0.3 and prior to 5.0.11. It is, therefore, affected by a cross-site scripting vulnerability in the advanced dataset reports page due to a failure to properly sanitize user-supplied input to the 'sql-query' GET parameter before returning it to users. An unauthenticated, remote attacker can exploit this, via a crafted request, to execute arbitrary script code or HTML in the user's browser session. Note that this issue applies when the FortiAnalyzer feature is enabled.

The Fortinet FortiAnalyzer FortiOS version running on the remote host is 5.0.x prior to 5.0.11 or 5.2.x prior to 5.2.2. It is, therefore, affected by a cross-site scripting vulnerability in the advanced dataset reports page due to a failure to properly sanitize user-supplied input to the 'sql-query' GET parameter before returning it to users. An unauthenticated, remote attacker can exploit this, via a crafted request, to execute arbitrary script code or HTML in the user's browser session.

ID	Name	Product	Family	Severity
86471	Fortinet FortiManager FortiOS 5.0.x >= 5.0.3 and < 5.0.11 Dataset Reports XSS	Nessus	CGI abuses : XSS	medium
86470	Fortinet FortiAnalyzer FortiOS 5.0.x < 5.0.11 / 5.2.x < 5.2.2 Dataset Reports XSS	Nessus	CGI abuses : XSS	medium

CVE-2015-3620

medium

Tenable Plugins

medium

medium