VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 23, 2019· Updated Jun 17, 2026

CVE-2019-5594

CVE-2019-5594

Description

An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.

Affected products

4
  • Fortinet/Fortinac2 versions
    cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*range: >=8.3.0,<=8.3.6
    • cpe:2.3:a:fortinet:fortinac:8.5.0:*:*:*:*:*:*:*
  • Fortinet/FortiNACdescription
  • Fortinet/Fortinac Fllm-fuzzy
    Range: 8.3.0 to 8.3.6, 8.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.