Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:15:48 +0000 certfr-2022-avi-613 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… https://cve.radiocsirt.org/vuln/certfr-2022-avi-613 certfr-2022-avi-613 https://cve.radiocsirt.org/vuln/certfr-2022-avi-613 EUVD-2026-196945 https://cve.radiocsirt.org/vuln/euvd-2026-196945 EUVD-2026-196945 https://cve.radiocsirt.org/vuln/euvd-2026-196945 fkie_cve-2022-29057 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29057 <p>A improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.</p> <p>A improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-29057 GHSA-87cc-pvcr-mp5p https://cve.radiocsirt.org/vuln/ghsa-87cc-pvcr-mp5p <p>A improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.</p> <p>A improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.</p> https://cve.radiocsirt.org/vuln/ghsa-87cc-pvcr-mp5p gsd-2022-29057 https://cve.radiocsirt.org/vuln/gsd-2022-29057 gsd-2022-29057 https://cve.radiocsirt.org/vuln/gsd-2022-29057