Skip to content
OpenAdvisories
High · 8.0 CVE-2022-35851 EUVD-2022-38724GHSA-8jhj-q939-gpr7

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a re…

Published Nov 2, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiADC FortiADC 7.1.0 —

References