CVE-2025-58324: XSS
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58324?
CVE-2025-58324 is classified as a medium severity vulnerability due to the potential for authenticated attackers to exploit the flaw.
How do I mitigate CVE-2025-58324?
To mitigate CVE-2025-58324, ensure you upgrade FortiSIEM to version 7.2.2 or later or apply the necessary patches provided by Fortinet.
What types of attacks can CVE-2025-58324 enable?
CVE-2025-58324 can allow authenticated attackers to execute cross-site scripting (XSS) attacks, potentially leading to unauthorized actions on behalf of users.
In which versions of FortiSIEM does CVE-2025-58324 exist?
CVE-2025-58324 affects FortiSIEM versions 7.2.0 to 7.2.2, as well as all versions of 7.1, 7.0, and earlier versions down to 6.2.
Is CVE-2025-58324 being actively exploited?
As of the latest updates, there is no public indication that CVE-2025-58324 is currently being actively exploited in the wild.