VULNERABILITY INTELLIGENCE

CVE-2019-5588

CVSS score6.1 MEDIUM
EPSS probability0.83%
CISA KEVNot currently listed
Published2019-06-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references