Lucene search
FortiGuard LabsFG-IR-21-248HistoryDec 06, 2022 - 12:00 a.m.
Protect
2022-12-0600:00:00
FortiGuard Labs
www.fortiguard.com
37
fortios
stored xss attack
input neutralization
web page generation
cross-site scripting
cwe-79
privileged attacker
malicious payloads
EPSS
0.001
Percentile
22.9%
A improper neutralization of input during web page generation (‘cross-site scripting’) [CWE-79] in FortiOS may allow a privileged attacker to perform a stored XSS attack via storing malicious payloads in replacement messages.
Related
cvelist
cvelist
CVE-2022-40680
2022-12-06 16:00:38
nvd
nvd
CVE-2022-40680
2022-12-06 17:15:10
cnvd
cnvd
Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2023-02487)
2022-12-08 00:00:00
prion
prion
Cross site scripting
2022-12-06 17:15:00
cve
cve
CVE-2022-40680
2022-12-06 17:15:10
nessus
nessus
Fortinet Fortigate xss (FG-IR-21-248)
2023-08-08 00:00:00