Lucene search
HistorySep 06, 2022 - 4:15 p.m.
CVE-2022-26114
cve-2022-26114
fortimail
webmail
cross-site scripting
cwe-79
input neutralization
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.2%
An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting (XSS) attack via sending specially crafted mail messages.
Affected configurations
Node
fortinetfortimailRange<7.2.0
References
Related
cvelist
cvelist
CVE-2022-26114
2022-09-06 15:15:12
cve
cve
CVE-2022-26114
2022-09-06 16:15:08
prion
prion
Cross site scripting
2022-09-06 16:15:00
fortinet
fortinet
FortiMail - Cross-site scripting (XSS) in Webmail
2022-09-06 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.2%
Related for NVD:CVE-2022-26114