VULNERABILITY INTELLIGENCE

CVE-2025-58324

CVSS score6.4 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-10-14
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.

Weakness classification

  • psirt@fortinet.com: CWE-79

Primary references