High severity8.0NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026
CVE-2022-35851
CVE-2022-35851
Description
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.
Affected products
3- cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*
- Range: 7.1.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-22-314nvdVendor Advisory
News mentions
0No linked articles in our index yet.