6.1 Medium

CVE-2022-22304 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent…

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Affected products and versions

Product	Affected versions	Fixed in
Fortinet FortiAuthenticator OutlookAgent	Versions not published

Do you use Fortinet FortiAuthenticator OutlookAgent?

Track this CVE Watch Fortinet FortiAuthenticator OutlookAgent Check my SBOMs

www.cveye.io/en/cve/CVE-2022-22304

Timeline

Published July 18, 2022
Last modified October 22, 2024

References

fortiguard.com fortiguard.com

Track this CVE