Unrated severityNVD Advisory· Published Mar 3, 2021· Updated Oct 25, 2024

CVE-2020-15937

Description

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack (XSS) via the IPS and WAF logs dashboard.

Affected products

Fortinet/Fortigatellm-fuzzy
Range: >=6.2.0,<6.2.5 or >=6.4.0,<6.4.1
Fortinet/Fortinetcpe-rescue
Range: FortiOS 6.4.1, 6.2.5

Patches

Vulnerability mechanics

References

fortiguard.com/advisory/FG-IR-20-068mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000