CVE-2019-16156

—

CVSS 3.1

6.1 medium

EPSS

<1%p61

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).

Vendors: fortinet
Products: fortiweb
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.