Lucene search
Fortiweb Security Vulnerabilities - 2020
cve
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).
6.1CVSS
6.1AI Score
0.002EPSS
2020-03-12 10:15 PM
48
cve
An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose debug commands.
6.5CVSS
6.1AI Score
0.001EPSS
2020-03-13 04:15 PM
33
cve
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.
5.4CVSS
5AI Score
0.001EPSS
2020-03-17 01:15 PM
29