CVE-2020-12814 — Fortinet / Fortinet FortiAnalyzer

CVE-2020-12814

Fortinet / Fortinet FortiAnalyzer PUBLISHED

Description (CNA)

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiAnalyzer	affected FortiAnalyzer 6.4.4, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-20-092

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-20-092

CISA-ADP

No English description supplied.

No references supplied.