CVE-2021-22122 — Fortinet / Fortinet FortiWeb

Description (CNA)

An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiWeb	affected FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-20-122

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-20-122

CISA-ADP

No English description supplied.

No references supplied.