CVE-2019-5586

Published: 2019-06-04T22:29Z

Last Modified: 2024-11-21T04:45Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error process HTTP requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt