FORTINET-PRODUCTS-2941EBF393B08634 release notes and known issues

Cross-Site Scripting in Domain parameter

Scope: Fortinet products. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

CVSSv3 Score: 5.3 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80] in FortiSIEM may allow a privileged administrator to execute unauthorized commands via crafted requests. Revised on 2026-07-14 00:00:00

Improvements and security content

CVSSv3 Score: 5.3 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80] in FortiSIEM may allow a privileged administrator to execute unauthorized commands via crafted requests. Revised on 2026-07-14 00:00:00

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

Fortinet products

Affected versions

Fixed versions or updates

No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence

FORTINETVERIFIED

Cross-Site Scripting in Domain parameter

Checked 8 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.

Open the official publisher source