CVE-2022-39950

🗓️ 02 Nov 2022 00:00:00Reported by fortinetType

Improper input neutralization in FortiManager and FortiAnalyze

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2022-39950	2 Nov 202212:15	–	attackerkb
BDU FSTEC	Fortinet FortiManager FortiAnalyzer XSS	22 Dec 202000:00	–	bdu_fstec
CNNVD	Fortinet FortiManager和FortiAnalyzer 跨站脚本漏洞	1 Nov 202200:00	–	cnnvd
CVE	CVE-2022-39950	2 Nov 202200:00	–	cve
EUVD	EUVD-2022-42394	3 Oct 202520:07	–	euvd
Fortinet	FortiManager/FortiAnalyzer - XSS Vulnerability in Report Templates	1 Nov 202200:00	–	fortinet
NCSC	Vulnerability fixed in FortiManager and FortiAnalyzer	2 Nov 202200:00	–	ncsc
NVD	CVE-2022-39950	2 Nov 202212:15	–	nvd
osv_cve	CVE-2022-39950	2 Nov 202212:15	–	osv_cve
Prion	Design/Logic Flaw	2 Nov 202212:15	–	prion

[
  {
    "vendor": "Fortinet",
    "product": "Fortinet FortiAnalyzer, FortiManager",
    "versions": [
      {
        "version": "FortiAnalyzer 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0; FortiManager 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-21-228

02 Nov 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18

EPSS0.0075

SSVC