Not rated
CVE-2020-12815 An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated…
Description
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiTester | Versions not published |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of Fortinet FortiTester
The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…
7.8
High
CVE-2022-38372
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…
6.7
Medium
CVE-2022-33872
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
9.8
Critical
CVE-2022-33873
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
6.8
Medium