CVE-2022-22304

🗓️ 18 Jul 2022 16:35:28Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 84 Views

An improper neutralization of input during web page generation vulnerability in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-22304	18 Jul 202217:15	–	attackerkb
Circl	CVE-2022-22304	18 Jul 202220:39	–	circl
CNNVD	Fortinet FortiAuthenticator 跨站脚本漏洞	7 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-22304	18 Jul 202216:35	–	cvelist
EUVD	EUVD-2022-27450	3 Oct 202520:07	–	euvd
Fortinet	FortiAuthenticator - XSS vulnerability in OWA login page	7 Jun 202200:00	–	fortinet
NCSC	Vulnerability fixed in Fortinet products	8 Jun 202200:00	–	ncsc
NVD	CVE-2022-22304	18 Jul 202217:15	–	nvd
Prion	Design/Logic Flaw	18 Jul 202217:15	–	prion
RedhatCVE	CVE-2022-22304	22 May 202523:48	–	redhatcve

NVD

Node

fortinet fortiauthenticator_agent_for_microsoft_outlook_web_accessMatch2.1

fortinet fortiauthenticator_agent_for_microsoft_outlook_web_accessMatch2.2

[
  {
    "product": "Fortinet FortiAuthenticator OutlookAgent",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiAuthenticator Agent for Microsoft OWA version 2.2 and 2.1."
      }
    ]
  }
]