8.8
High
CVE-2022-38374 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 -…
Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiADC | Versions not published |
Other CVEs of Fortinet FortiADC
The 7 CVEs of Fortinet FortiADC →
CVE-2022-35851
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface…
8.0
High
CVE-2022-38381
An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all…
5.3
Medium
CVE-2022-27484
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an…
5.4
Medium
CVE-2022-26120
Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89]…
5.4
Medium