CVE-2022-40680

CVSS V2 None CVSS V3 None
Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a privileged attacker to execute unauthorized code or commands via storing malicious payloads in replacement messages.
Overview
  • CVE ID
  • CVE-2022-40680
  • Assigner
  • psirt@fortinet.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-06T17:15:10
  • Last Modified Date
  • 2022-12-07T21:36:32
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* 1 OR 6.0.7 6.0.15
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* 1 OR 6.2.2 6.2.12
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* 1 OR 6.4.0 6.4.9
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* 1 OR 7.0.0 7.0.3
References
Reference URL Reference Tags
https://fortiguard.com/psirt/FG-IR-21-248
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:50 Added to TrackCVE
2022-12-07 21:15:56 2022-12-06T17:15:10.997 2022-12-06T17:15:10 CVE Published Date updated
2022-12-07 21:15:56 2022-12-06T19:23:25 CVE Modified Date updated
2022-12-07 21:15:56 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-07 22:15:00 2022-12-07T21:36:32 CVE Modified Date updated
2022-12-07 22:15:00 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-07 22:15:00 CWE-79 Weakness Enumeration new
2022-12-07 22:15:02 CPE Information updated