Lucene search
HistoryNov 02, 2022 - 12:15 p.m.
CVE-2022-38374
fortinet fortiadc
cross-site scripting
unauthorized code execution
url
user fields
traffic logviews
event logviews
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.3%
A improper neutralization of input during web page generation (‘cross-site scripting’) in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews.
Affected configurations
Node
fortinetfortiadcRange6.2.0–6.2.4
ORfortinetfortiadcRange7.0.0–7.0.3
References
Related
cve
cve
CVE-2022-38374
2022-11-02 12:15:54
githubexploit
githubexploit
Exploit for Cross-site Scripting in Fortinet Fortiadc
2023-03-03 18:43:02
cnvd
cnvd
Fortinet FortiADC Cross-Site Scripting Vulnerability (CNVD-2023-02489)
2022-11-05 00:00:00
fortinet
fortinet
FortiADC - Persistent XSS in Log pages
2022-11-01 00:00:00
cvelist
cvelist
CVE-2022-38374
2022-11-02 00:00:00
prion
prion
Cross site scripting
2022-11-02 12:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.3%
Related for NVD:CVE-2022-38374