CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. It affects FortiOS, Java. It may be remotely exploitable.
CVE
CVE-2024-23111
Severity
MEDIUM
CVSS
6.8
EPSS
1.04%
FortiOS Java
Original NVD Description
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.
Related CVEs
Other vulnerabilities affecting the same vendor(s)