rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-38273 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:41:01.000Z
CVE-2022-38274 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:41:02.000Z
CVE-2022-38275 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:57.000Z
CVE-2022-38276 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:56.000Z
CVE-2022-38277 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:56.000Z
CVE-2022-38278 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:55.000Z
CVE-2022-38279 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:53.000Z
CVE-2022-38280 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:52.000Z
CVE-2022-38281 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:52.000Z
CVE-2022-38282 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:51.000Z
CVE-2022-38283 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:50.000Z
CVE-2022-38284 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:50.000Z
CVE-2022-38285 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:49.000Z
CVE-2022-38286 
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T13:40:48.000Z
CVE-2022-38291 
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:30:54.000Z
CVE-2022-38292 
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:30:55.000Z
CVE-2022-38295 
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:43:50.000Z
CVE-2022-38296 
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:43:51.000Z
CVE-2022-38297 
UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T22:10:27.000Z
CVE-2022-38298 
Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T21:49:54.000Z
CVE-2022-38299 
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T21:49:55.000Z
CVE-2022-38301 
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T20:13:38.000Z
CVE-2022-38302 
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T22:44:01.000Z
CVE-2022-38303 
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T22:44:02.000Z
CVE-2022-38304 
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T22:44:03.000Z
CVE-2022-38305 
AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-13T22:36:09.000Z
CVE-2022-38306 
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-13T20:16:44.000Z
CVE-2022-38307 
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-13T20:16:45.000Z
CVE-2022-38308 
TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T20:25:46.000Z
CVE-2022-38309 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:41:01.000Z
CVE-2022-38310 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:41:03.000Z
CVE-2022-38311 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:41:05.000Z
CVE-2022-38312 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:41:06.000Z
CVE-2022-38313 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:41:07.000Z
CVE-2022-38314 
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T18:40:52.000Z
CVE-2022-38323 
Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T00:39:45.000Z
CVE-2022-38325 
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T19:01:37.000Z
CVE-2022-38326 
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T19:01:38.000Z
CVE-2022-38329 
A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing the administrator to perform unintended actions on an affected system. The vulnerability could allow attackers to modify or delete specific content through crafted requests, potentially leading to data loss and system integrity issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-13T00:00:00.000Z
CVE-2022-38333 
Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-19T16:13:20.000Z
CVE-2022-38334 
XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T00:00:00.000Z
CVE-2022-38335 
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-27T17:10:22.000Z
CVE-2022-38336 
An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-05T00:00:00.000Z
CVE-2022-38337 
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service (DoS) for the user if services like fail2ban are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-05T00:00:00.000Z
CVE-2022-38339 
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.6
baseSeverity: CRITICAL
Published: 2022-09-19T00:00:00.000Z
CVE-2022-38340 
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2022-09-20T00:00:00.000Z
CVE-2022-38341 
Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-19T00:00:00.000Z
CVE-2022-38342 
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:C/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 8.5
baseSeverity: HIGH
Published: 2022-09-13T00:00:00.000Z
CVE-2022-38349 
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2022-38351 
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2022-09-19T20:27:30.000Z
CVE-2022-38352 
ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T01:05:42.000Z
CVE-2022-38355 
Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to 

attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.


Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Daikin
product: SVMPC1 
default_status: unaffected
vendor: Daikin
product: SVMPC2
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Chizuru Toyama from TXOne Networks reported these vulnerabilities to CISA.
Published: 2022-12-13T21:12:06.551Z
CVE-2022-38356 WordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes WordPress Header Builder Plugin – Pearl plugin <= 1.3.4 versions.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: StylemixThemes
product: WordPress Header Builder Plugin – Pearl
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Lana Codes (Patchstack Alliance)
Published: 2023-05-25T10:25:12.133Z
CVE-2022-38357 
Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.
Problem types: description: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products: vendor: n/a
product: Eyes of Network Web
Published: 2022-08-15T22:07:49.000Z
CVE-2022-38358 
Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php via the parameters rule_notification, rule_name, and rule_name_old, and at /module/admin_user/add_modify_user.php via the parameters user_name and user_email.
Problem types: description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: n/a
product: Eyes of Network
Published: 2022-08-15T22:04:14.000Z
CVE-2022-38359 
Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections. An attacker can, for instance, delete the admin user by directing an authenticated user to the URL https://<target-address>/module/admin_user/index.php?DataTables_Table_0_length=10&user_selected%5B%5D=1&user_mgt_list=delete_user&action=submit by means of a crafted link.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: Eyes of Network
Published: 2022-08-15T22:05:17.000Z
CVE-2022-38362 Docker Provider <3.0 RCE vulnerability in example dag
Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: Thanks to Kai Zhao of 3H Secruity Team for reporting this
Published: 2022-08-16T14:10:09.000Z
CVE-2022-38367 
The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-05T17:30:21.000Z
CVE-2022-38368 
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T20:59:09.000Z
CVE-2022-38369 Login check vulnerability by session Id
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Problem types: description:   
Affected products: vendor: Apache Software Foundation
product: Apache IoTDB
Published: 2022-09-05T09:50:09
CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector. 
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.
Problem types: description:   
Affected products: vendor: Apache Software Foundation
product: Apache IoTDB
Published: 2022-09-05T09:50:10
CVE-2022-38372 
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command.
Problem types: description: Improper access control
Affected products: vendor: Fortinet
product: Fortinet FortiTester
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitCodeMaturity: FUNCTIONAL
remediationLevel: UNAVAILABLE
reportConfidence: CONFIRMED
baseScore: 6.7
temporalScore: 6.5
baseSeverity: MEDIUM
temporalSeverity: MEDIUM
Published: 2022-11-02T00:00:00.000Z
CVE-2022-38373 
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting (XSS) attack via sending requests with specially crafted lure resource ID.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiDeceptor
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitCodeMaturity: PROOF_OF_CONCEPT
remediationLevel: NOT_DEFINED
reportConfidence: REASONABLE
baseScore: 8
temporalScore: 7.3
baseSeverity: HIGH
temporalSeverity: HIGH
Published: 2022-11-02T00:00:00.000Z
CVE-2022-38374 
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiADC
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitCodeMaturity: PROOF_OF_CONCEPT
remediationLevel: UNAVAILABLE
reportConfidence: REASONABLE
baseScore: 8.8
temporalScore: 8
baseSeverity: HIGH
temporalSeverity: HIGH
Published: 2022-11-02T00:00:00.000Z
CVE-2022-38375 
An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Problem types: cwe_id: CWE-285
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiNAC
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:P/RL:U/RC:C
Published: 2023-02-16T18:06:21.944Z