Skip to content
Sign in
3.4 Low

CVE-2022-38379 Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may…

Description

Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.

Affected products and versions

Product Affected versions Fixed in
FortiSOAR 7.2.0 No fix stated
FortiSOAR 7.0 7.0.0 → 7.0.3 No fix stated

Other CVEs of FortiSOAR

The 15 CVEs of FortiSOAR →
CVE-2024-48892 A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all… 6.4 Medium CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in… 6.2 Medium CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4… 7.7 High CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium
Track this CVE