Unscored CVE-2020-6640 EUVD-2020-27787GHSA-3vj4-cg97-x27w

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perfor…

Published Jun 4, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Description Area.

Affected products

Vendor	Product	Affected	Fixed
—	Fortinet FortiAnalyzer	FortiAnalyzer 6.2.3, 6.2.2	—

References

https://fortiguard.com/advisory/FG-IR-20-003