vulnerability
Fortinet FortiManager: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2020-12811)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Sep 24, 2020 | Jul 26, 2021 | Jul 26, 2021 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Sep 24, 2020
Added
Jul 26, 2021
Modified
Jul 26, 2021
Description
An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.
Solutions
fortinet-fortimanager-upgrade-6_2_6fortinet-fortimanager-upgrade-6_2_7
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.