VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 24, 2020· Updated Oct 25, 2024

CVE-2020-12811

CVE-2020-12811

Description

An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.

Affected products

3
  • Fortinet/Fortianalyzerllm-fuzzy2 versions
    = 6.2.0, 6.2.1, 6.2.2, 6.2.3+ 1 more
    • (no CPE)range: = 6.2.0, 6.2.1, 6.2.2, 6.2.3
    • (no CPE)range: FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3 ; FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3
  • Fortinet/Fortimanagerllm-fuzzy
    Range: = 6.2.0, 6.2.1, 6.2.2, 6.2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.