CVE-2022-41330 | BDVDB-2026-199688 Detail

Description#

An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-11Record published in the CVE List.
2. Version 22024-10-23Most recent update recorded in the CVE List.