Fortinet Fortianalyzer
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_fortianalyzer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Fortianalyzer (08c81734-1c6b-5471-ace6-ca4ad0112f0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24021 |
vulnerable | 2026-06-08 05:30:03.482431 |
Details available
MEDIUM (4.3)
An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks.
Published: 2021-10-06T09:45:59.000Z
Updated: 2024-10-25T13:48:55.991Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12817 |
vulnerable | 2026-06-08 05:17:59.342299 |
Details available
An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.
Published: 2020-09-24T13:31:29.000Z
Updated: 2024-10-25T14:24:23.911Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12814 |
vulnerable | 2026-06-08 05:17:59.335308 |
Details available
MEDIUM (4.1)
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.
Published: 2021-11-02T17:56:02.000Z
Updated: 2024-10-25T13:47:44.558Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.