CVE-2012-6347

Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to (1) admin/auditTrail.jsf, (2) mapolicymgmt/targetsMonitorView.jsf, (3) vascan/globalsummary.jsf, (4) vaerrorlog/vaErrorLog.jsf, (5) database/listTargetGroups.jsf, (6) sysconfig/listSystemInfo.jsf, (7) vascan/list.jsf, (8) network/router.jsf, (9) mapolicymgmt/editPolicyProfile.jsf, or (10) mapolicymgmt/maPolicyMasterList.jsf.

• CWE-79

• https://fortiguard.com/psirt/FG-IR-012-007Vendor Advisory
• https://www.vulnerability-lab.com/get_content.php?id=558Exploit, Third Party Advisory
• https://fortiguard.com/psirt/FG-IR-012-007Vendor Advisory
• https://www.vulnerability-lab.com/get_content.php?id=558Exploit, Third Party Advisory

Published

Feb 9, 2018

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-6340An Authentication vulnerability exists in NETGEAR WGR614 v7 …4.6
• CVE-2012-6341An Information Disclosure vulnerability exists in the my con…6.5
• CVE-2012-6342Cross-site request forgery (CSRF) vulnerability in logout.ac…
• CVE-2012-6344Novell ZENworks Configuration Management before 11.2.4 allow…6.1
• CVE-2012-6345Novell ZENworks Configuration Management before 11.2.4 allow…7.5
• CVE-2012-6346Multiple cross-site scripting (XSS) vulnerabilities in Forti…
• CVE-2012-6348Centrify Deployment Manager 2.1.0.283, as distributed in Cen…
• CVE-2012-6349Buffer overflow in the .mdb parser in Autonomy KeyView IDOL,…
• CVE-2012-6350Cross-site scripting (XSS) vulnerability in the Web componen…
• CVE-2012-6352The Session Manager in IBM Sterling Connect:Direct through 4…
• CVE-2012-6354The management GUI on the IBM SAN Volume Controller and Stor…
• CVE-2012-6355IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Ma…