CVE-2022-29057: Fortinet Fortiedr

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints.

Affected products

• Fortinet Fortiedr: from 5.0.0, before 5.0.3 (fixed in 5.0.3); version 4.0.0 only; version 5.0.3 only; version 5.1.0 only

Published 2022-07-19. Last modified 2026-06-17.