CVE-2020-12814

Publication date

2021-11-02 17:56:02

Family

fortinet

State

PUBLISHED

Description

A improper neutralization of input during web page generation (cross-site scripting) in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.