CVE-2020-9288: XSS
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9288?
CVE-2020-9288 has been classified as a medium severity vulnerability due to its potential impact on user session security.
How does CVE-2020-9288 affect FortiWLC 8.5.1?
CVE-2020-9288 allows remote authenticated attackers to exploit stored cross-site scripting (XSS) vulnerabilities through unvalidated input in the ESS or Radius Profile.
How do I fix CVE-2020-9288?
To mitigate CVE-2020-9288, it is recommended to upgrade FortiWLC to the latest version beyond 8.5.1 where the vulnerability is addressed.
Can CVE-2020-9288 be exploited remotely?
Yes, CVE-2020-9288 can be exploited remotely by authenticated attackers looking to execute stored XSS attacks.
What types of attacks are associated with CVE-2020-9288?
CVE-2020-9288 is specifically associated with stored cross-site scripting attacks that could allow attackers to execute scripts in the context of the user's session.