Skip to content
OpenAdvisories
Unscored CVE-2018-1351 EUVD-2018-11930GHSA-522q-xfm6-22q6

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascr…

Published Jun 28, 2018 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiManager Category: Network devices

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiManager FortiManager 6.0.0 and below versions —

References