Description
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0.3 and below, version 6.2.5 and below may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.
Published: 2023-04-11
Score: 3.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Please upgrade to FortiADC version 7.1.2 or above Please upgrade to FortiADC version 7.0.4 or above Please upgrade to FortiADC version 6.2.6 or above

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-46922 An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0.3 and below, version 6.2.5 and below may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.
References
Link Providers
https://fortiguard.com/psirt/FG-IR-22-439 cve-icon cve-icon
History

Tue, 22 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Fortinet Fortiadc
cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published:

Updated: 2024-10-22T20:47:28.460Z

Reserved: 2022-10-27T07:40:06.589Z

Link: CVE-2022-43952

cve-icon Vulnrichment

Updated: 2024-08-03T13:47:05.216Z

cve-icon NVD

Status : Modified

Published: 2023-04-11T17:15:07.847

Modified: 2024-11-21T07:27:24.260

Link: CVE-2022-43952

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses