4.9
Medium
CVE-2020-12811 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow…
Description
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiManager, FortiAnalyzer | Versions not published | |
| FortiManager 6.2 | 6.2.0 → 6.2.5 | No fix stated |
| FortiAnalyzer 6.2 | 6.2.7 → 6.2.11 | No fix stated |
Other CVEs of Fortinet FortiManager, FortiAnalyzer
The 5 CVEs of Fortinet FortiManager, FortiAnalyzer →
CVE-2022-27483
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager…
7.2
High
CVE-2022-22300
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11,…
4.3
Medium
CVE-2021-36170
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and…
3.2
Low
CVE-2017-17541
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer…
Not rated