Lucene search
FortinetCVE-2022-38379HistoryDec 06, 2022 - 5:15 p.m.
CVE-2022-38379
2022-12-0617:15:10
CWE-79
fortinet
web.nvd.nist.gov
32
cve-2022-38379
fortisoar
cwe-79
security vulnerability
web application security
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
22.9%
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Affected configurations
Node
fortinetfortisoarRange7.0.0–7.0.3
ORfortinetfortisoarMatch7.2.0
CNA Affected
[
{
"vendor": "Fortinet",
"product": "FortiSOAR",
"defaultStatus": "unaffected",
"versions": [
{
"version": "7.2.0",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.3",
"status": "affected"
}
]
}
]References
Related
cvelist
cvelist
CVE-2022-38379
2022-12-06 16:00:58
cnvd
cnvd
Fortinet FortiSOAR Cross-Site Scripting Vulnerability
2022-12-08 00:00:00
prion
prion
Input validation
2022-12-06 17:15:00
nvd
nvd
CVE-2022-38379
2022-12-06 17:15:10
fortinet
fortinet
FortiSOAR - HTML Injection Vulnerabilities
2022-12-06 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
22.9%
Related for CVE-2022-38379