CVE-2021-22122

2021-02-0815:55:39

fortinet

www.cve.org

0.055 Low

EPSS

Percentile

93.2%

JSON

An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.

CNA Affected

[
  {
    "product": "Fortinet FortiWeb",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiWeb 6.3.0 through 6.3.7 and  version before 6.2.4"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-20-122

0.055 Low

EPSS

Percentile

93.2%

JSON

Related for CVELIST:CVE-2021-22122