Lucene search
K

The vulnerability of Fabric Connectors in the Fabric View software module of the FortiTester, a software-hardware platform for diagnosing and auditing computer networks, as well as the FortiAnalyzer device for monitoring and analyzing security events, allows attackers to carry out cross-site scripting attacks.

🗓️ 28 Oct 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 2 Views

XSS in FortiTester connectors and FortiAnalyzer due to insecure Name handling.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNVD
Fortinet FortiAnalyzer Cross-Site Scripting Vulnerability (CNVD-2020-53812)
23 Sep 202000:00
cnvd
CVE
CVE-2020-12817
24 Sep 202013:31
cve
Cvelist
CVE-2020-12817
24 Sep 202013:31
cvelist
EUVD
EUVD-2020-5100
7 Oct 202500:30
euvd
NCSC
Vulnerabilities fixed in FortiAnalyzer
22 Sep 202000:00
ncsc
NVD
CVE-2020-12817
24 Sep 202015:15
nvd
Prion
Input validation
24 Sep 202015:15
prion
RedhatCVE
CVE-2020-12817
22 May 202515:49
redhatcve
Vulnrichment
CVE-2020-12817
24 Sep 202013:31
vulnrichment
Vulners
Node
OROR
fortinetfortianalyzerRange6.4.06.4.2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Oct 2022 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 38.8
CVSS 29
EPSS0.02276
2