Skip to content
Sign in
Not rated

CVE-2020-12817 An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote…

Description

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiAnalyzer Versions not published

Other CVEs of Fortinet FortiAnalyzer

The 3 CVEs of Fortinet FortiAnalyzer →
CVE-2020-12814 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version… 4.1 Medium CVE-2021-24021 An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below… 4.3 Medium
Track this CVE