Skip to content
Sign in
Not rated

CVE-2020-6646 An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored…

Description

An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWeb Versions not published

Other CVEs of Fortinet FortiWeb

The 3 CVEs of Fortinet FortiWeb →
CVE-2020-29015 A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an… Not rated CVE-2020-29019 A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote,… Not rated
Track this CVE