4.9
Moyenne
CVE-2020-12811 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow…
Description
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiManager, FortiAnalyzer | Versions non publiées | |
| FortiManager 6.2 | 6.2.0 → 6.2.5 | Pas de correctif indiqué |
| FortiAnalyzer 6.2 | 6.2.7 → 6.2.11 | Pas de correctif indiqué |
Autres CVE de Fortinet FortiManager, FortiAnalyzer
Les 5 CVE de Fortinet FortiManager, FortiAnalyzer →
CVE-2022-27483
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager…
7.2
Élevée
CVE-2022-22300
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11,…
4.3
Moyenne
CVE-2021-36170
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and…
3.2
Faible
CVE-2017-17541
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer…
Non notée