CVE-2019-6697: XSS
An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname parameter of a DHCP packet under DHCP monitor page may allow an unauthenticated attacker in the same network as the FortiGate to perform a Stored Cross Site Scripting attack (XSS) by sending a crafted DHCP packet.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6697?
CVE-2019-6697 is rated as a high-severity vulnerability due to its potential for Stored Cross-Site Scripting attacks.
How do I fix CVE-2019-6697?
To mitigate CVE-2019-6697, you should upgrade FortiGate to version 6.2.2 or later, or 6.0.7 or later.
Who is affected by CVE-2019-6697?
CVE-2019-6697 affects users of Fortinet FortiGate versions 6.2.0 through 6.2.1 and 6.0.0 through 6.0.6.
Can CVE-2019-6697 be exploited remotely?
CVE-2019-6697 can be exploited by an unauthenticated attacker on the same network as the FortiGate device.
What type of attack can CVE-2019-6697 enable?
CVE-2019-6697 can enable Stored Cross-Site Scripting attacks, which could lead to unauthorized actions on behalf of users.