CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32602

An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE value.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.4%

CVSS Severity

CVSS v3 Score 5.8

CVSS v2 Score 4.3

References

Products affected by CVE-2021-32602

Fortinet » Fortiportal » Version: 4.0.0

cpe:2.3:a:fortinet:fortiportal:4.0.0
Fortinet » Fortiportal » Version: 4.0.1

cpe:2.3:a:fortinet:fortiportal:4.0.1
Fortinet » Fortiportal » Version: 4.0.2

cpe:2.3:a:fortinet:fortiportal:4.0.2
Fortinet » Fortiportal » Version: 4.0.3

cpe:2.3:a:fortinet:fortiportal:4.0.3
Fortinet » Fortiportal » Version: 4.0.4

cpe:2.3:a:fortinet:fortiportal:4.0.4
Fortinet » Fortiportal » Version: 4.1.0

cpe:2.3:a:fortinet:fortiportal:4.1.0
Fortinet » Fortiportal » Version: 4.1.1

cpe:2.3:a:fortinet:fortiportal:4.1.1
Fortinet » Fortiportal » Version: 4.1.2

cpe:2.3:a:fortinet:fortiportal:4.1.2
Fortinet » Fortiportal » Version: 4.2.0

cpe:2.3:a:fortinet:fortiportal:4.2.0
Fortinet » Fortiportal » Version: 4.2.1

cpe:2.3:a:fortinet:fortiportal:4.2.1
Fortinet » Fortiportal » Version: 4.2.2

cpe:2.3:a:fortinet:fortiportal:4.2.2
Fortinet » Fortiportal » Version: 5.0.0

cpe:2.3:a:fortinet:fortiportal:5.0.0
Fortinet » Fortiportal » Version: 5.0.1

cpe:2.3:a:fortinet:fortiportal:5.0.1
Fortinet » Fortiportal » Version: 5.0.2

cpe:2.3:a:fortinet:fortiportal:5.0.2
Fortinet » Fortiportal » Version: 5.0.3

cpe:2.3:a:fortinet:fortiportal:5.0.3
Fortinet » Fortiportal » Version: 5.1.0

cpe:2.3:a:fortinet:fortiportal:5.1.0
Fortinet » Fortiportal » Version: 5.1.1

cpe:2.3:a:fortinet:fortiportal:5.1.1
Fortinet » Fortiportal » Version: 5.1.2

cpe:2.3:a:fortinet:fortiportal:5.1.2
Fortinet » Fortiportal » Version: 5.2.0

cpe:2.3:a:fortinet:fortiportal:5.2.0
Fortinet » Fortiportal » Version: 5.2.1

cpe:2.3:a:fortinet:fortiportal:5.2.1
Fortinet » Fortiportal » Version: 5.2.2

cpe:2.3:a:fortinet:fortiportal:5.2.2
Fortinet » Fortiportal » Version: 5.2.3

cpe:2.3:a:fortinet:fortiportal:5.2.3
Fortinet » Fortiportal » Version: 5.2.4

cpe:2.3:a:fortinet:fortiportal:5.2.4
Fortinet » Fortiportal » Version: 5.2.5

cpe:2.3:a:fortinet:fortiportal:5.2.5
Fortinet » Fortiportal » Version: 5.2.6

cpe:2.3:a:fortinet:fortiportal:5.2.6
Fortinet » Fortiportal » Version: 5.3.0

cpe:2.3:a:fortinet:fortiportal:5.3.0
Fortinet » Fortiportal » Version: 5.3.1

cpe:2.3:a:fortinet:fortiportal:5.3.1
Fortinet » Fortiportal » Version: 5.3.2

cpe:2.3:a:fortinet:fortiportal:5.3.2
Fortinet » Fortiportal » Version: 5.3.3

cpe:2.3:a:fortinet:fortiportal:5.3.3
Fortinet » Fortiportal » Version: 5.3.4

cpe:2.3:a:fortinet:fortiportal:5.3.4
Fortinet » Fortiportal » Version: 5.3.5

cpe:2.3:a:fortinet:fortiportal:5.3.5
Fortinet » Fortiportal » Version: 5.3.6

cpe:2.3:a:fortinet:fortiportal:5.3.6
Fortinet » Fortiportal » Version: 6.0.0

cpe:2.3:a:fortinet:fortiportal:6.0.0
Fortinet » Fortiportal » Version: 6.0.1

cpe:2.3:a:fortinet:fortiportal:6.0.1
Fortinet » Fortiportal » Version: 6.0.2

cpe:2.3:a:fortinet:fortiportal:6.0.2
Fortinet » Fortiportal » Version: 6.0.3

cpe:2.3:a:fortinet:fortiportal:6.0.3
Fortinet » Fortiportal » Version: 6.0.4

cpe:2.3:a:fortinet:fortiportal:6.0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32602

Products

Pricing

Contact Us