CVE-2019-5594

2019-08-2320:10:54

fortinet

www.cve.org

EPSS

0.001

Percentile

35.7%

JSON

An Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.

CNA Affected

[
  {
    "product": "Fortinet FortiNAC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiNAC 8.3.0 to 8.3.6 and 8.5.0"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-140

EPSS

0.001

Percentile

35.7%

JSON

Related for CVELIST:CVE-2019-5594