CVE-2022-22304: Fortinet Fortiauthenticator Agent For Microsoft Outlook Web Access

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

Affected products

• Fortinet Fortiauthenticator Agent For Microsoft Outlook Web Access: version 2.1 only; version 2.2 only

Published 2022-07-18. Last modified 2026-06-17.