CVE-2020-12811
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A basic XSS vulnerability in Fortinet products due to improper neutralization of script-related HTML tags. An attacker may execute unauthorized code or commands via network exploitation.
Risk Assessment
Malicious script execution in the user's browser could lead to session theft or other attacks.
Recommendation
Apply security updates provided by Fortinet for affected products.
Other vulnerabilities in Fortinet
See all- CVE-2023-27997CriticalActively exploited
Heap-based buffer overflow in SSL-VPN in FortiOS and FortiProxy, allowing a remote attacker to execute arbitrary code or commands via specially crafted requests.
- CVE-2020-9290High
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
- CVE-2020-9287High
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
- CVE-2019-5589High
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Original NVD description (English source)
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Vulnerability data from NVD (NIST) · CISA KEV · EPSS