← Database

CVE-2022-22304

MEDIUM CVSS: 6.1 Published: 2022-07-18 Modified: 2026-06-17

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Affected Platforms

Fortinet Fortiauthenticator Agent For Microsoft Outlook Web Access

Weakness Type

CWE-79

References