VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 2, 2022· Updated Oct 25, 2024

CVE-2022-38374

CVE-2022-38374

Description

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews.

Affected products

2
  • Fortinet/FortiADCllm-fuzzy
    Range: >=6.2.0, <=6.2.4 || >=7.0.0, <=7.0.2
  • Fortinet/Fortinetcpe-rescue
    Range: FortiADC 7.0.2, 7.0.1, 7.0.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.