High severity8.8NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026
CVE-2022-38374
CVE-2022-38374
Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews.
Affected products
3- Range: 7.0.0 - 7.0.2, 6.2.0 - 6.2.4
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-22-232nvdVendor Advisory
News mentions
0No linked articles in our index yet.