Lucene search
FortinetCVELIST:CVE-2020-12811HistorySep 24, 2020 - 1:36 p.m.
CVE-2020-12811
2020-09-2413:36:12
fortinet
www.cve.org
2
cve-2020-12811
fortimanager
fortianalyzer
cross site scripting
EPSS
0.001
Percentile
33.8%
An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.
CNA Affected
[
{
"product": "Fortinet FortiManager, FortiAnalyzer",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3 ; FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3"
}
]
}
]References
Related
nvd
nvd
CVE-2020-12811
2020-09-24 18:15:16
prion
prion
Cross site scripting
2020-09-24 18:15:00
fortinet
fortinet
XSS vulnerability in FortiManager and FortiAnalyzer
2020-09-18 00:00:00
cve
cve
CVE-2020-12811
2020-09-24 18:15:16