Lucene search
HistoryNov 02, 2022 - 12:15 p.m.
CVE-2022-35851
cve-2022-35851
fortiadc
cross site scripting
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.
Affected configurations
Node
fortinetfortiadcMatch7.1.0
References
Related
prion
prion
Cross site scripting
2022-11-02 12:15:00
cve
cve
CVE-2022-35851
2022-11-02 12:15:53
fortinet
fortinet
FortiADC - Stored XSS vulnerability in external resource page
2022-11-01 00:00:00
cvelist
cvelist
CVE-2022-35851
2022-11-02 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for NVD:CVE-2022-35851