CVE-2020-9287

HighCVSS 7.8/10Last modified Oct 13, 2026

Description

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Mar 15, 2020
Last modified
Oct 13, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-92885.4An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scCVE-2020-92897.5Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 andCVE-2020-92907.8A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableCVE-2020-92917.8An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via eCVE-2020-92929.8An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoCVE-2020-92949.8An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a CVE-2020-92957.5FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 runningCVE-2020-92969.8Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, diCVE-2020-92979.8Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building CVE-2020-92987.5The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requesCVE-2020-92995.4There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident PrCVE-2020-93006.5The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themsel
CVE-2020-9287: High severity, CVSS 7.8 | Vulnix