description: An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiAnalyzer
vendor: Fortinet
versions:
status: affected, version: FortiAnalyzer before 6.4.1; before 6.2.5
}