PT-2020-5536 · Fortinet · Fortiadc

Published 2020-04-06 · Updated 2020-04-09 · CVE-2020-6647

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FortiADC (affected versions not specified)

Description The issue is related to an improper neutralization of input in the FortiADC dashboard, allowing an authenticated attacker to perform a cross-site scripting attack (XSS) via the name parameter. This could enable a remote attacker to carry out inter-site script attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-01075

CVE-2020-6647

Affected Products

Fortiadc

References · 5

• https://fortiguard.com/psirt/FG-IR-20-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6647 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6647 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01075 · Security Note
• https://t.me/cvenotify/2512 · Telegram Post