Skip to content
OpenAdvisories
Unscored CVE-2020-12817 EUVD-2020-5100GHSA-fv47-8pvw-qc6p

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inje…

Published Sep 24, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAnalyzer Category: Network devices

Description

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiAnalyzer FortiAnalyzer before 6.4.1; before 6.2.5 —

References