CVE-2019-17651

An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below…

published January 28, 2020

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.1th percentile
Published
2020-01-28T00:44Z
EPSS history
Timeline
  • 28 JAN 00:44Z
    An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below…
    cvelistv5