VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 24, 2020· Updated Jun 17, 2026

CVE-2020-12815

CVE-2020-12815

Description

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.

Affected products

5
  • Fortinet/Fortianalyzer
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
    Range: <=6.2.5
  • Fortinet/FortiTester3 versions
    cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*range: <=3.7.0
    • cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*
    • (no CPE)range: <3.9.0
  • Fortinet/Fortinetcpe-rescue
    Range: FortiTester before 3.9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.