Lucene search

Fortitester Security Vulnerabilities - 2020

cve

CVE-2020-12815

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.

5.4CVSS

5.2AI Score

0.001EPSS

2020-09-24 06:15 PM

cve

CVE-2020-12817

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.

8.8CVSS

8.2AI Score

0.003EPSS

2020-09-24 03:15 PM