CVE-2021-32585: Fortinet Fortiwan

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests.

Affected products

• Fortinet Fortiwan: before 4.5.9 (fixed in 4.5.9)

Published 2022-04-06. Last modified 2026-06-17.