CVE-2019-5590 Vulnerability Details

  /     /     /  

CVE-2019-5590 Metadata Quick Info

CVE Published: 28/08/2019 | CVE Updated: 25/10/2024 | CVE Year: 2019
Source: fortinet | Vendor: Fortinet | Product: FortiWeb
Status : PUBLISHED

---

CVE-2019-5590 Description

The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Execute unauthorized code or commands
Source: Fortinet

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).