fortinet fortianalyzer CVE-2020-12817 vulnerability in Fortinet Products
Published on September 24, 2020

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.

NVD


Products Associated with CVE-2020-12817

stack.watch emails you whenever new vulnerabilities are published in Fortinet Fortianalyzer or Fortinet Fortitester. Just hit a watch button to start following.

Fortinet Fortianalyzer
 
Fortinet Fortitester
 

Affected Versions

Fortinet FortiAnalyzer Version FortiAnalyzer before 6.4.1; before 6.2.5 is affected by CVE-2020-12817

Exploit Probability

EPSS
0.43%
Percentile
62.54%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.