Not rated
CVE-2019-16154 An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an…
Description
An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiAuthenticator WEB UI | 6.0.0 | No fix stated |