7 matches found
CVE-2020-6646
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...
CVE-2020-6646
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...
CVE-2020-6646: Improper Neutralization of Input During Web Page Generation
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...
CVE-2017-3133
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...
CVE-2017-3133
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...
CVE-2017-3133: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...
PT-2017-3712
Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.6.0 and earlier Description: The issue is related to a Cross-Site Scripting vulnerability in the Replacement Message HTML for SSL-VPN, which is caused by insufficient protection of the web page structure. This allows an...