CVE-2020-6647

Summary

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack (XSS) via the name parameter.

Affected Software

VendorProductVersion RangeStatus
n/aFortinet FortiADCFortiADC 5.4.0 and 5.3.x before 5.3.5.affected

Weaknesses

  • Execute unauthorized code or commands

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References