medium6.1
CVE-2022-38376
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.…
Impact
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinac | from 8.5.0 through 8.5.4 from 8.6.0 before 9.4.2 Version 8.3.7 |