CVE-2014-1458: Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 a...

Security readout for executives and security teams

CVE-2014-1458 is a cross-site scripting flaw in the FortiGuard FortiWeb web administration interface. A remote authenticated administrator could inject script or HTML through unspecified vectors. Business urgency depends on whether old FortiWeb versions remain in use and whether the admin interface is reachable beyond tightly controlled networks. Exposure is most likely in environments still running FortiWeb 5.0.3 or earlier, especially where the web administration interface is reachable by broad internal networks, VPN users, or the internet. Treat this as a targeted legacy-appliance hygiene issue rather than an internet-wide emergency. If affected FortiWeb versions are still deployed, prioritize remediation because the weakness sits in a security device’s management plane. Mitigation focus: Inventory FortiWeb appliances and identify any running 5.0.3 or earlier.; Check Fortinet/FortiGuard advisory FG-IR-14-001 for vendor-confirmed upgrade or mitigation guidance.; Restrict FortiWeb admin interface access to trusted management networks only..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.