CVE-2022-22304

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may…

Medium · published July 18, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Published
2022-07-18T16:35Z
EPSS history
Timeline
  • 18 JUL 16:35Z
    An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may…
    cvelistv5