VYPR
← All advisories
Low severity2.7NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2025-22855

CVE-2025-22855

Description

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/Forticlientems2 versions
    cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*range: >=7.2.1,<=7.2.10
    • (no CPE)range: 7.4.0
  • Fortinet/Forticlientllm-fuzzy
    Range: <7.4.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.