Lucene search

CVE-2022-30304

🗓️ 16 Feb 2023 19:12:15Reported by fortinetType

Improper input neutralization in FortiAnalyzer pre-7.2.1 may allow stored XSS attack via URL parameter

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
CNVD	Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2023-18299)	20 Feb 202300:00	–	cnvd
NVD	CVE-2022-30304	16 Feb 202319:15	–	nvd
Fortinet	FortiAnalyzer - XSS vulnerability due to AngularJS Client-Side Template injection	16 Feb 202300:00	–	fortinet
Vulnrichment	CVE-2022-30304	16 Feb 202318:06	–	vulnrichment
Cvelist	CVE-2022-30304	16 Feb 202318:06	–	cvelist
Prion	Cross site scripting	16 Feb 202319:15	–	prion

Nvd

Node

fortinet fortianalyzerRange6.0.0–6.0.11

fortinet fortianalyzerRange6.2.0–6.2.9

fortinet fortianalyzerRange6.4.0–6.4.9

fortinet fortianalyzerRange7.0.0–7.0.5

fortinet fortianalyzerMatch7.2.0

fortinet fortianalyzerMatch7.2.1

[
  {
    "vendor": "Fortinet",
    "product": "FortiAnalyzer",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.8",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.9",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-22-166

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Feb 2023 19:15Current

6Medium risk

Vulners AI Score6

CVSS34.3 - 6.1

EPSS0.00218

SSVC

CWE-79