Skip to content
OpenAdvisories
Unscored CVE-2019-16154 EUVD-2019-6975GHSA-3g24-4p5j-c5q8

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perf…

Published Jan 7, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiAuthenticator WEB UI Category: Network devices

Description

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page.

Affected products

VendorProductAffectedFixed
Fortinet FortiAuthenticator WEB UI 6.0.0 —

References