Skip to content
Sign in
5.4 Medium

CVE-2022-29057 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version…

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiEDR Versions not published

Other CVEs of Fortinet FortiEDR

The 5 CVEs of Fortinet FortiEDR →
CVE-2022-39949 An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0… 4.4 Medium CVE-2022-23440 A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors… 7.8 High CVE-2022-23441 A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may… 9.1 Critical CVE-2022-23446 A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker… 4.4 Medium
Track this CVE