2 matches found
CVE-2022-38373
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting XSS attack via sending requests with specially crafted lure resource ID...
5.4CVSS5.3AI score0.00477EPSS
SaveExploits0References1
CVE-2022-38373: Improper Neutralization of Input During Web Page Generation
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting XSS attack via sending requests with specially crafted lure resource ID...
8CVSS5.6AI score0.00477EPSS
SaveExploits0References2
20