What is CVE-2019-5586?

CVE-2019-5586 is a medium-severity vulnerability in Fortinet Fortios, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2019-06-04.

How severe is CVE-2019-5586?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Fortinet Fortios

CVE-2019-5586

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error pr…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (53.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Fortinet Fortios — versions FortiOS 5.2.0 to 6.0.4
Fortinet Fortios

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@fortinet.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
psirt@fortinet.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-5586?: CVE-2019-5586 is a medium-severity vulnerability in Fortinet Fortios, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2019-06-04.
How severe is CVE-2019-5586?: Medium severity. CVSS v3 base score is 6.1 out of 10.