Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)
Vulnerability Title
Fortinet FortiPortal 安全漏洞
Vulnerability Description
Fortinet FortiPortal是美国飞塔（Fortinet）公司的FortiGate、FortiWiFi 和 FortiAP 产品线的高级、功能丰富的托管安全分析和管理支持工具，可作为虚拟机供 MSP 使用。 Fortinet FortiPortal存在安全漏洞，该漏洞源于网页中脚本相关html标签的不当中和，导致跨站脚本漏洞。攻击者利用该漏洞可以通过html注入执行未经授权的代码或命令。
CVSS Information
N/A
Vulnerability Type
N/A