CVE-2019-16156

Description

An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).

Reserved 2019-09-09 | Published 2020-03-12 | Updated 2024-10-25 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

6.0.5
affected

6.2.0
affected

6.1.1
affected

References

fortiguard.com/advisory/FG-IR-19-265

cve.org (CVE-2019-16156)

nvd.nist.gov (CVE-2019-16156)

Download JSON