Skip to content
fr Sign in
8.0 High

CVE-2022-35851 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface…

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiADC Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiADC

The 7 CVEs of Fortinet FortiADC →
CVE-2022-38381 An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all… 5.3 Medium CVE-2022-38374 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 -… 8.8 High CVE-2022-27484 A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an… 5.4 Medium CVE-2022-26120 Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89]… 5.4 Medium
Track this CVE