Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:16 a.m.8 views

CVE-2022-27491

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML...

7.5CVSS6.9AI score0.01219EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/26 12:0 a.m.22 views

Fortinet Fortigate TCP Middlebox Reflection (FG-IR-22-073)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-073 advisory. - A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.21...

7.5CVSS7.3AI score0.01219EPSS
Exploits0References3
OSV
OSV
added 2022/09/19 7:15 a.m.2 views

CVE-2022-40778

A stored Cross-Site Scripting XSS vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response...

5.4CVSS6AI score0.00385EPSS
Exploits0References2
Prion
Prion
added 2022/09/19 7:15 a.m.11 views

Cross site scripting

A stored Cross-Site Scripting XSS vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response...

4.9CVSS5.3AI score0.00385EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 6:8 a.m.21 views

CVE-2022-40778

A stored Cross-Site Scripting XSS vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response...

5.5AI score0.00385EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/06 6:15 p.m.3 views

CVE-2022-27491

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML...

7.5CVSS6AI score0.01219EPSS
Exploits0References2
OSV
OSV
added 2022/09/06 6:15 p.m.1 views

CVE-2022-27491

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML...

7.5CVSS5.9AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/09/06 3:10 p.m.1 views

CVE-2022-27491

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML...

6.8CVSS5.7AI score0.01219EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.13 views

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform of American Fita Fortinet Company. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering, anti-spam, and other security features, and the IPS engine is one of...

7.5CVSS7.5AI score0.01219EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.2 views

PT-2022-18451 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 5.001 through 5.258 Fortinet FortiOS versions 6.001 through 6.121 Fortinet FortiOS versions 7.001 through 7.113 Fortinet FortiOS versions 7.201 through 7.214 Fortinet FortiOS versions before 4.086 Description: The...

7.5CVSS7.3AI score0.01219EPSS
Exploits0References5
Prion
Prion
added 2007/01/30 4:28 p.m.13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...

4.3CVSS5.9AI score0.02065EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2007/01/30 4:0 p.m.23 views

CVE-2007-0563

Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...

5.7AI score0.02065EPSS
Exploits0References8
securityvulns
securityvulns
added 2006/07/10 12:0 a.m.54 views

MIMESweeper For Web Crossite scripting

Crossite scripting for blocked page...

1.4AI score
Exploits0References1Affected Software1
Rows per page
Query Builder