578
VMScore

CVE-2020-12817

Published: 24/09/2020 Updated: 21/07/2021
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

An improper neutralization of input vulnerability in FortiAnalyzer prior to 6.4.1 and 6.2.5 may allow a remote authenticated malicious user to inject script related HTML tags via Name parameter of Storage Connectors.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortianalyzer 6.2.5

fortinet fortianalyzer 6.4.0

fortinet fortianalyzer 6.4.1

fortinet fortitester

fortinet fortitester 3.8.0