CVE-2019-5590 — Fortinet / FortiWeb

CVE-2019-5590

Fortinet / FortiWeb PUBLISHED

Description (CNA)

The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiWeb	affected 6.0.2 and below

CWE

No CWE identifiers supplied.

References

http://www.securityfocus.com/bid/108786
https://fortiguard.com/advisory/FG-IR-19-070

ADP enrichment

CVE

No English description supplied.

http://www.securityfocus.com/bid/108786
https://fortiguard.com/advisory/FG-IR-19-070

CISA-ADP

No English description supplied.

No references supplied.