medium4.1
CVE-2020-15940
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated atta…
Impact
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient Enterprise Management Server | from 6.0.0 through 6.0.8 from 6.2.0 through 6.2.9 from 6.4.0 through 6.4.1 |