CVE-2020-12817

2020-09-2413:31:29

fortinet

www.cve.org

fortianalyzer

input vulnerability

html tags

storage connectors

cve-2020-12817

AI Score

8.3

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.

CNA Affected

[
  {
    "product": "Fortinet FortiAnalyzer",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiAnalyzer before 6.4.1; before 6.2.5"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-20-054