VULNERABILITY INTELLIGENCE

CVE-2019-15706

CVSS score4.1 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2025-03-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Description

An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, version 1.2.9 and below and FortiOS version 6.2.1 and below, version 6.0.8 and below, version 5.6.12 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS).

Weakness classification

  • psirt@fortinet.com: CWE-79

Primary references