CVE-2022-43955

🗓️ 11 Apr 2023 16:06:43Reported by fortinetType

Improper input neutralization in FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 and mor

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-43955	11 Apr 202320:23	–	circl
CNNVD	Fortinet FortiWeb 跨站脚本漏洞	11 Apr 202300:00	–	cnnvd
Cvelist	CVE-2022-43955	11 Apr 202316:06	–	cvelist
EUVD	EUVD-2022-46925	3 Oct 202520:07	–	euvd
Fortinet	FortiWeb - XSS vulnerability in HTML generated attack report files	11 Apr 202300:00	–	fortinet
Tenable Nessus	Fortinet FortiWeb xss (FG-IR-22-428)	13 Apr 202300:00	–	nessus
NCSC	Vulnerabilities fixed in Fortinet FortiWeb and FortiADC	12 Apr 202300:00	–	ncsc
NVD	CVE-2022-43955	11 Apr 202317:15	–	nvd
Prion	Cross site scripting	11 Apr 202317:15	–	prion
RedhatCVE	CVE-2022-43955	23 May 202501:23	–	redhatcve

NVD

Node

fortinet fortiwebRange6.0.0–6.2.7

fortinet fortiwebRange6.3.0–6.3.22

fortinet fortiwebRange6.4.0–6.4.2

fortinet fortiwebRange7.0.0–7.0.4

[
  {
    "vendor": "Fortinet",
    "product": "FortiWeb",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.3.0",
        "lessThanOrEqual": "6.3.21",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-22-428

21 Nov 2024 07:27Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1 - 8.8

EPSS0.00264

SSVC

CWE-79