Medium severity4.7NVD Advisory· Published Mar 3, 2021· Updated Jun 17, 2026

CVE-2020-15937

Description

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack (XSS) via the IPS and WAF logs dashboard.

Affected products

Fortinet/Fortios
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Range: >=6.2.0,<6.2.5
Fortinet/Fortigatellm-fuzzy
Range: <6.2.5, <6.4.1
Fortinet/Fortinetcpe-rescue
Range: FortiOS 6.4.1, 6.2.5

Patches

Vulnerability mechanics

References

fortiguard.com/advisory/FG-IR-20-068nvdNot ApplicableVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000