Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*

part: a version: 6.4.4 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortianalyzer (d7dd2fa6-1904-5c8d-829d-0027a4718e9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12814 vulnerable 2026-06-08 05:17:59.336477 Details available
MEDIUM (4.1)
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.
Published: 2021-11-02T17:56:02.000Z
Updated: 2024-10-25T13:47:44.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.