Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-35851


An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address.


Published

2022-11-02T12:15:53.570

Last Modified

2024-11-21T07:11:49.203

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

Weaknesses
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiadc 7.1.0 Yes

References