Security Advisory

CVE-2020-12814

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-11-02 17:56:02

Last updated 2024-10-25 13:47:44

Assigner fortinet

CVSS score 4.1

State PUBLISHED

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.

← Browse all CVEs View on cve.org ↗