CVE-2025-58324: Fortinet Fortisiem

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.

Affected products

• Fortinet Fortisiem: from 6.2.0, before 7.2.3 (fixed in 7.2.3)

Published 2025-10-14. Last modified 2026-10-08.