CVE-2020-12816

MEDIUM 6.1CVE-2020-12816 · Published 24/09/2020 · updated 17/06/2026

In short

CVE-2020-12816 is a MEDIUM (CVSS 6.1) vulnerability affecting fortinac (fortinet).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.0% of all vulnerabilities.
Fix: update to 8.7.3 or later.

Package	Affected versions	Patched versions
fortinac fortinet	`< 8.7.3`	`8.7.3`

Description

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.

References

fortiguard.com/advisory/FG-IR-20-002 · Vendor Advisory
fortiguard.com/psirt/FG-IR-20-002 · Vendor Advisory

More vulnerabilities in fortinac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortinac

fortinet

< 8.7.3

8.7.3

More vulnerabilities in fortinac

See all →