CVE-2018-13375

An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send…

published May 28, 2019

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in FortiAnalyzer and FortiManager (with FortiAnalyzer feature enabled).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00647 · 50.1th percentile
Published
2019-05-28T18:33Z
EPSS history
Timeline
  • 28 MAY 18:33Z
    An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send…
    cvelistv5