CVE-2019-5594

An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@fortinet.com

Published

2019-08-23

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortinac (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-19-140