Skip to content
fr Sign in
4.1 Medium

CVE-2020-12814 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version…

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiAnalyzer Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiAnalyzer

The 3 CVEs of Fortinet FortiAnalyzer →
CVE-2021-24021 An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below… 4.3 Medium CVE-2020-12817 An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote… Not rated
Track this CVE