Skip to content
OpenAdvisories
Unscored CVE-2020-6646 EUVD-2020-27793GHSA-7m6g-jmv3-c8cf

An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripti…

Published Mar 17, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.

Affected products

VendorProductAffectedFixed
— Fortinet FortiWeb FortiWeb 6.2.2 —

References