An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.
References
History

Fri, 25 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2022-11-02T00:00:00

Updated: 2024-10-25T13:26:57.968Z

Reserved: 2022-07-13T00:00:00

Link: CVE-2022-35851

cve-icon Vulnrichment

Updated: 2024-08-03T09:44:22.123Z

cve-icon NVD

Status : Analyzed

Published: 2022-11-02T12:15:53.570

Modified: 2022-11-03T13:49:48.657

Link: CVE-2022-35851

cve-icon Redhat

No data.