---
id: CVE-2020-12811
title: >-
  A improper neutralization of script-related html tags in a web page (basic
  xss) vulnerability in Fortinet  may allow attacker to execute unauthorized
  code or commands via network exploitable
summary: >-
  A improper neutralization of script-related html tags in a web page (basic
  xss) vulnerability in Fortinet  may allow attacker to execute unauthorized
  code or commands via network exploitable
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cwe:
  - CWE-80
  - CWE-79
vendor: fortinet
product: fortianalyzer
affected:
  - 'fortianalyzer >= 6.2.0, <= 6.2.6'
  - 'fortimanager >= 6.2.0, <= 6.2.6'
published: '2020-09-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T18:17:10.733'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-12811'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-20-005'
    label: psirt@fortinet.com
  - url: 'https://fortiguard.com/advisory/FG-IR-20-005'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00801
epssPercentile: 0.55467
ingestedAt: '2026-10-13T18:41:42.717Z'
---

## Overview

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet  may allow attacker to execute unauthorized code or commands via network exploitable

## Affected

- `fortianalyzer >= 6.2.0, <= 6.2.6`
- `fortimanager >= 6.2.0, <= 6.2.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.