CVE-2019-5590

The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands…

published August 28, 2019

CVSS
—
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00965 · 61.3th percentile
Published
2019-08-28T16:45Z
EPSS history
Timeline
  • 28 AUG 16:45Z
    The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands…
    cvelistv5