VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 7, 2020· Updated Jun 17, 2026

CVE-2020-6647

CVE-2020-6647

Description

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack (XSS) via the name parameter.

Affected products

4
  • Fortinet/Fortiadc Firmware2 versions
    cpe:2.3:o:fortinet:fortiadc_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortiadc_firmware:*:*:*:*:*:*:*:*range: <=5.3.4
    • cpe:2.3:o:fortinet:fortiadc_firmware:5.4.0:*:*:*:*:*:*:*
  • Fortinet/FortiADCdescription
  • Fortinet/FortiADC-Ellm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.