VDB
CVE-2022-40679
CVE-2022-40679
PUBLISHED
CVSS 4.199999809265137 MEDIUM
An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the "reset-password" page.
EPSS 0.28% · 51.6th percentile
Risk Scores
CVSS 3.1
4.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:F/RL:U/RC:C
EPSS Score
0.28%
51.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiAuthenticator | 6.3.0, 6.2.0, 6.1.0 |
Exploit Intelligence
- https://fortiguard.com/psirt/FG-IR-22-275 (circl)
- android_malware.yar (github-yara)
- android_malware.yar (github-yara)
- android_malware.yar (github-yara)
- android_malware.yar (github-yara)
- CVE-2022-0847.yara (github-yara)
- CVE-2022-0847.yara (github-yara)
- CVE-2022-0847.yara (github-yara)
- CVE-2022-0847.yara (github-yara)
- CVE-2022-0847.yara (github-yara)
…and 7 more exploits
Timeline
- Apr 11, 2023 CVE Published
- Apr 12, 2023 EPSS Score
- May 20, 2023 EPSS Score
- Jun 26, 2023 EPSS Score
- Aug 3, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
- Oct 18, 2023 EPSS Score
- Nov 24, 2023 EPSS Score
- Jan 1, 2024 EPSS Score
- Feb 8, 2024 EPSS Score
- Mar 17, 2024 EPSS Score
- Apr 23, 2024 EPSS Score
References
- https://www.fortiguard.com/psirt/FG-IR-22-428 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-479 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-502 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-363 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-429 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-186 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-432 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-051 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-056 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-409 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-355 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-060 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-481 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-335 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-050 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-439 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-444 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-320 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-381 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-336 advisory
…and 2 more