Lucene search

K
fortinetFortiGuard LabsFG-IR-20-027
HistoryOct 05, 2021 - 12:00 a.m.

FortiWebManager - Injection vulnerabilities

2021-10-0500:00:00
FortiGuard Labs
www.fortiguard.com
15
fortiwebmanager
injection vulnerability
remote attacker
malicious script
neutralization.

EPSS

0.001

Percentile

29.2%

An improper neutralization of input vulnerability [CWE-79] in FortiWebManager may allow a remote authenticated attacker to inject malicious script/tags via the name/description/comments parameter of various sections of the device.

EPSS

0.001

Percentile

29.2%

Related for FG-IR-20-027