2.6.0

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-24	CVE-2020-12815	Cross-site Scripting vulnerability in Fortinet Fortianalyzer and Fortitester An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields. network low complexity fortinet CWE-79	5.4
2020-09-24	CVE-2020-12817	Cross-site Scripting vulnerability in Fortinet Fortianalyzer and Fortitester An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors. network low complexity fortinet CWE-79	8.8