CVE-2021-24021

5.4 mediumEPSS 0.7%

Medium (5.4) in fortinet fortianalyzer. EPSS 0.7% chance of exploitation in the next 30 days.

An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2021-10-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortianalyzer

References

https://fortiguard.com/advisory/FG-IR-20-098
https://fortiguard.com/advisory/FG-IR-20-098

Check your stack JSON