Cross site scripting

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews...

Sql injection

An improper handling of malformed request vulnerability CWE-228 exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection suc...

CVE-2022-38381

An improper handling of malformed request vulnerability CWE-228 exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection suc...

CVE-2022-38381

The CVE-2022-38381 entry covers FortiADC, affecting 5.0, 6.0.0, 6.1.0, 6.2.0–6.2.3, and 7.0.0–7.0.2. It describes an improper handling of malformed requests (CWE-228) that may allow a remote, unauthenticated attacker to bypass Web Application Firewall protections (e.g., SQL Injection and XSS filt...

CVE-2022-38374

Fortinet FortiADC is affected by CVE-2022-38374 due to improper neutralization of input during web page generation (XSS). Affects FortiADC versions 6.2.0–6.2.4 and 7.0.0–7.0.2. An attacker can exploit via the URL and User fields observed in traffic and event log views to run client-side code. The...

CVE-2022-35851

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting XSS attack via configuring a specially crafted IP Address...

CVE-2022-38381

An improper handling of malformed request vulnerability CWE-228 exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection suc...

Fortinet FortiADC 安全漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in Fortinet FortiADC versions 5.0, 6.0.0, 6.1.0, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. An attacker could exploit the vulnerability to perform SQL injection and cross-site scripting...

CVE-2022-38381

An improper handling of malformed request vulnerability CWE-228 exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection suc...

Fortinet FortiADC 跨站脚本漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in Fortinet FortiADC version 7.1.0 that originates from incorrect neutralization of input during web page generation. An attacker could exploit the vulnerability to execute cross-site...

CVE-2022-38374

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews...

PT-2022-24398 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 5.0 through 7.0.2 Description: An improper handling of malformed request vulnerability exists in FortiADC, allowing a remote attacker without privileges to bypass some Web Application Firewall WAF protection, such as the SQL...

CVE-2022-38374

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews...

CVE-2022-35851

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting XSS attack via configuring a specially crafted IP Address...

CVE-2022-35851

FortiADC management interface 7.1.0 is affected by an improper neutralization of input during web page generation (CWE-79) that may allow a remote and authenticated attacker to trigger a stored cross-site scripting (XSS) attack by configuring a specially crafted IP Address. The issue is documente...

Fortinet FortiADC 跨站脚本漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A cross-site scripting vulnerability exists in Fortinet FortiADC, which stems from incorrectly neutralizing input during web page generation. An attacker could exploit this vulnerability to execute client-side code...

The vulnerability in the FortiADC Manager web management tool, a controller for FortiADC applications, allows a hacker to obtain user credentials.

The vulnerability of the FortiADC Manager web management tool, a controller for FortiADC applications, relates to the storage of confidential information in plaintext format. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain user credentials from log files...

PT-2022-5804 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC management interface version 7.1.0 Description: The issue is related to an improper neutralization of input during web page generation, which may allow a remote and authenticated attacker to trigger a stored cross site scripting XSS...

FortiADC - WAF XSS Injection Bypass

An improper handling of malformed request vulnerability CWE-228 in FortiADC may allow a remote attacker without privileges to bypass some Web Application Firewall WAF protection such as the SQL Injection and XSS filters via a malformed HTTP request...

FortiADC - Stored XSS vulnerability in external resource page

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiADC management interface may allow a remote and authenticated attacker to trigger a stored cross site scripting XSS attack via configuring a specially crafted IP Address...