What’s Vulnerable › Vulnerabilities

CVE-2020-12811

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-24 · updated 2026-10-13
• Weakness: CWE-80

Description

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Affected products

• Fortinet FortiAnalyzer: from 6.2.0 through 6.2.6
• Fortinet FortiManager: from 6.2.0 through 6.2.6

In the news

• HTML injection in WebUI

References

• https://fortiguard.fortinet.com/psirt/FG-IR-20-005
• https://fortiguard.com/advisory/FG-IR-20-005

Get alerted when CVE-2020-12811 or the next vulnerability affects your stack