FortiADC - Persistent XSS in Log pages

2022-11-0100:00:00

FortiGuard Labs

www.fortiguard.com

fortiadc

xss

cwe-79

web application

vulnerability

remote attacker

http fields

logviews

0.001 Low

EPSS

Percentile

31.5%

JSON

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC may allow a remote unauthenticated attacker to perform a stored cross site scripting (XSS) attack via HTTP fields observed in the traffic and event logviews.

CPENameOperatorVersion
fortiadceq7.0.2
fortiadceq7.0.1
fortiadceq7.0.0
fortiadceq6.2.3
fortiadceq6.2.2
fortiadceq6.2.1
fortiadceq6.2.0

Name	Operator	Version
fortiadc	eq	7.0.2
fortiadc	eq	7.0.1
fortiadc	eq	7.0.0
fortiadc	eq	6.2.3
fortiadc	eq	6.2.2
fortiadc	eq	6.2.1
fortiadc	eq	6.2.0

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for FG-IR-22-232