Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-22304 EUVD-2022-27450GHSA-cwcw-4cq8-h2hw

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version…

Published Jul 18, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAuthenticator OutlookAgent Category: Network devices

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiAuthenticator OutlookAgent FortiAuthenticator Agent for Microsoft OWA version 2.2 and 2.1. —

References