Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisoar:7.5.1:*:*:*:*:*:*:*

part: a version: 7.5.1 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisoar (9a1c7a6a-0e0a-5329-be5f-750e33c067e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32932 vulnerable 2026-06-08 07:19:01.194195 Details available
MEDIUM (6.2)
An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests
Published: 2025-08-12T19:00:01.506Z
Updated: 2025-08-13T20:13:36.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48892 vulnerable 2026-06-08 06:50:11.637446 Details available
MEDIUM (6.4)
A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack.
Published: 2025-08-12T19:00:07.291Z
Updated: 2025-08-13T20:13:21.451Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.