CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.0. It affects Fortinet, FortiOS.
CVE
CVE-2022-40680
Severity
MEDIUM
CVSS
4
EPSS
0.38%
Fortinet FortiOS
Original NVD Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a privileged attacker to execute unauthorized code or commands via storing malicious payloads in replacement messages.
Related CVEs
Other vulnerabilities affecting the same vendor(s)