CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-30304

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated attacker to perform a stored cross site scripting (XSS) attack via the URL parameter observed in the FortiWeb attack event logview in FortiAnalyzer.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.5%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2022-30304

Fortinet » Fortianalyzer » Version: 6.0.0

cpe:2.3:a:fortinet:fortianalyzer:6.0.0
Fortinet » Fortianalyzer » Version: 6.0.1

cpe:2.3:a:fortinet:fortianalyzer:6.0.1
Fortinet » Fortianalyzer » Version: 6.0.10

cpe:2.3:a:fortinet:fortianalyzer:6.0.10
Fortinet » Fortianalyzer » Version: 6.0.11

cpe:2.3:a:fortinet:fortianalyzer:6.0.11
Fortinet » Fortianalyzer » Version: 6.0.2

cpe:2.3:a:fortinet:fortianalyzer:6.0.2
Fortinet » Fortianalyzer » Version: 6.0.3

cpe:2.3:a:fortinet:fortianalyzer:6.0.3
Fortinet » Fortianalyzer » Version: 6.0.4

cpe:2.3:a:fortinet:fortianalyzer:6.0.4
Fortinet » Fortianalyzer » Version: 6.0.5

cpe:2.3:a:fortinet:fortianalyzer:6.0.5
Fortinet » Fortianalyzer » Version: 6.0.6

cpe:2.3:a:fortinet:fortianalyzer:6.0.6
Fortinet » Fortianalyzer » Version: 6.0.7

cpe:2.3:a:fortinet:fortianalyzer:6.0.7
Fortinet » Fortianalyzer » Version: 6.0.8

cpe:2.3:a:fortinet:fortianalyzer:6.0.8
Fortinet » Fortianalyzer » Version: 6.0.9

cpe:2.3:a:fortinet:fortianalyzer:6.0.9
Fortinet » Fortianalyzer » Version: 6.2.0

cpe:2.3:a:fortinet:fortianalyzer:6.2.0
Fortinet » Fortianalyzer » Version: 6.2.1

cpe:2.3:a:fortinet:fortianalyzer:6.2.1
Fortinet » Fortianalyzer » Version: 6.2.2

cpe:2.3:a:fortinet:fortianalyzer:6.2.2
Fortinet » Fortianalyzer » Version: 6.2.3

cpe:2.3:a:fortinet:fortianalyzer:6.2.3
Fortinet » Fortianalyzer » Version: 6.2.4

cpe:2.3:a:fortinet:fortianalyzer:6.2.4
Fortinet » Fortianalyzer » Version: 6.2.5

cpe:2.3:a:fortinet:fortianalyzer:6.2.5
Fortinet » Fortianalyzer » Version: 6.2.6

cpe:2.3:a:fortinet:fortianalyzer:6.2.6
Fortinet » Fortianalyzer » Version: 6.2.7

cpe:2.3:a:fortinet:fortianalyzer:6.2.7
Fortinet » Fortianalyzer » Version: 6.2.8

cpe:2.3:a:fortinet:fortianalyzer:6.2.8
Fortinet » Fortianalyzer » Version: 6.2.9

cpe:2.3:a:fortinet:fortianalyzer:6.2.9
Fortinet » Fortianalyzer » Version: 6.4.0

cpe:2.3:a:fortinet:fortianalyzer:6.4.0
Fortinet » Fortianalyzer » Version: 6.4.1

cpe:2.3:a:fortinet:fortianalyzer:6.4.1
Fortinet » Fortianalyzer » Version: 6.4.2

cpe:2.3:a:fortinet:fortianalyzer:6.4.2
Fortinet » Fortianalyzer » Version: 6.4.3

cpe:2.3:a:fortinet:fortianalyzer:6.4.3
Fortinet » Fortianalyzer » Version: 6.4.4

cpe:2.3:a:fortinet:fortianalyzer:6.4.4
Fortinet » Fortianalyzer » Version: 6.4.5

cpe:2.3:a:fortinet:fortianalyzer:6.4.5
Fortinet » Fortianalyzer » Version: 6.4.6

cpe:2.3:a:fortinet:fortianalyzer:6.4.6
Fortinet » Fortianalyzer » Version: 6.4.7

cpe:2.3:a:fortinet:fortianalyzer:6.4.7
Fortinet » Fortianalyzer » Version: 6.4.8

cpe:2.3:a:fortinet:fortianalyzer:6.4.8
Fortinet » Fortianalyzer » Version: 7.0.0

cpe:2.3:a:fortinet:fortianalyzer:7.0.0
Fortinet » Fortianalyzer » Version: 7.0.1

cpe:2.3:a:fortinet:fortianalyzer:7.0.1
Fortinet » Fortianalyzer » Version: 7.0.2

cpe:2.3:a:fortinet:fortianalyzer:7.0.2
Fortinet » Fortianalyzer » Version: 7.0.3

cpe:2.3:a:fortinet:fortianalyzer:7.0.3
Fortinet » Fortianalyzer » Version: 7.0.4

cpe:2.3:a:fortinet:fortianalyzer:7.0.4
Fortinet » Fortianalyzer » Version: 7.2.0

cpe:2.3:a:fortinet:fortianalyzer:7.2.0
Fortinet » Fortianalyzer » Version: 7.2.1

cpe:2.3:a:fortinet:fortianalyzer:7.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-30304

Products

Pricing

Contact Us