CVE-2022-43955

2023-04-1117:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-43955

cwe-79

fortiweb

xss

input neutralization

remote code execution

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R

0.001 Low

EPSS

Percentile

29.6%

JSON

An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow an unauthenticated and remote attacker to perform a reflected cross site scripting attack (XSS) via injecting malicious payload in log entries used to build report.

Affected configurations

NVD

Node

fortinetfortiwebRange6.0.0–6.2.7

fortinetfortiwebRange6.3.0–6.3.22

fortinetfortiwebRange6.4.0–6.4.2

fortinetfortiwebRange7.0.0–7.0.4

CPENameOperatorVersion
fortinet:fortiwebfortinet fortiweble6.2.7
fortinet:fortiwebfortinet fortiweblt6.3.22
fortinet:fortiwebfortinet fortiweble6.4.2
fortinet:fortiwebfortinet fortiweblt7.0.4

CPE	Name	Operator	Version
fortinet:fortiweb	fortinet fortiweb	le	6.2.7
fortinet:fortiweb	fortinet fortiweb	lt	6.3.22
fortinet:fortiweb	fortinet fortiweb	le	6.4.2
fortinet:fortiweb	fortinet fortiweb	lt	7.0.4

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiWeb",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.3.0",
        "lessThanOrEqual": "6.3.21",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.8",
        "status": "affected"
      }
    ]
  }
]