CVE-2024-27780: 
FortiSIEM vulnerability analysis and mitigation

Multiple Cross-site Scripting (XSS) vulnerabilities have been identified in FortiSIEM's incident page affecting versions 7.1, 7.0, and 6.7. The vulnerability was disclosed on February 11, 2025, and has been assigned CVE-2024-27780. This security flaw affects the web page generation functionality in FortiSIEM's incident page interface (Fortinet Advisory).

The vulnerability is classified as an Improper Neutralization of Input During Web Page Generation (CWE-79) issue. The CVSS v3.1 base score assigned by Fortinet is 2.2 (Low) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N, indicating local access, high attack complexity, low privileges required, user interaction required, and low impact on integrity (NVD).

The vulnerability allows an authenticated attacker to perform cross-site scripting attacks through crafted HTTP requests. The impact is primarily focused on integrity with no direct effect on confidentiality or availability (Fortinet Advisory).

Fortinet recommends migrating to a fixed release for affected versions (7.1, 7.0, and 6.7). Versions 7.3, 7.2, 6.6, and earlier are not affected by this vulnerability (Fortinet Advisory).

The vulnerability was responsibly disclosed by Charlie Lindholm from Integrity360 and Christian Arlt (Fortinet Advisory).