CVE-2019-5586 — Fortinet / Fortinet FortiOS

Description (CNA)

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error process HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiOS	affected FortiOS 5.2.0 to 6.0.4

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-19-034
http://www.securityfocus.com/bid/108610

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-19-034
http://www.securityfocus.com/bid/108610

CISA-ADP

No English description supplied.

No references supplied.