medium6.1
CVE-2022-22304
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may all…
Impact
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiauthenticator Agent For Microsoft Outlook Web Access | Versions 2.1, 2.2 |