CVE-2020-12816

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.

Score

CVSS 3.1 6.1 Medium

Status

Modified - psirt@fortinet.com

Published

2020-09-24

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortinac (Fortinet)
• Fortinet Fortinac (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-002
• https://www.fortiguard.com/psirt/FG-IR-20-002