CVE-2022-43952: XSS
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0.3 and below, version 6.2.5 and below may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-43952?
CVE-2022-43952 is an improper neutralization of input during web page generation (Cross-site Scripting) vulnerability in FortiADC versions 7.1.1 and below, 7.0.3 and below, and 6.2.5 and below.
How does CVE-2022-43952 affect FortiADC?
CVE-2022-43952 may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests on FortiADC versions 7.1.1 and below, 7.0.3 and below, and 6.2.5 and below.
What is the severity of CVE-2022-43952?
CVE-2022-43952 has a severity score of 5.4 (medium).
How can I fix CVE-2022-43952?
To fix CVE-2022-43952, it is recommended to upgrade FortiADC to version 7.1.2, 7.0.4, or 6.2.6 depending on the affected version.
Where can I find more information about CVE-2022-43952?
You can find more information about CVE-2022-43952 at [FortiGuard Advisory FG-IR-22-439](https://fortiguard.com/psirt/FG-IR-22-439).