Security readout for executives and security teams
Plain-English summary
Fortinet FortiEDR Management Console has a reflected XSS flaw that could let an authenticated attacker trick a user into triggering malicious script in the console. The likely business impact is limited data exposure or unauthorized actions in the affected user's browser session, not direct server takeover.
Executive priority
Treat this as a medium-priority remediation item, higher if many users can authenticate to the console or administrators routinely access it from unmanaged browsers. It is not described as actively exploited, but XSS in security tooling can affect privileged sessions.
Technical view
CVE-2022-29057 is improper input neutralization during web page generation in FortiEDR. Sources describe reflected XSS via various Management Console endpoints. The CVSS 3.1 score is 5.4 with network access, low privileges, required user interaction, changed scope, low confidentiality impact, low integrity impact, and no availability impact.
Likely exposure
Exposure is limited to organizations running affected FortiEDR versions and allowing authenticated access to the Management Console. The bundle names FortiEDR 5.1.0, 5.0.0 through 5.0.3 Patch 6, and 4.0.0, with minor version-list inconsistency in the affected-product section.
Exploitation context
The source bundle does not show CISA KEV listing or active exploitation. The CVSS vector lists exploit code maturity as proof-of-concept, but no public exploit details are provided here. Successful exploitation requires an authenticated attacker and user interaction.
Researcher notes
Key constraints are authenticated access and required victim interaction. The bundle does not include endpoint names, payload details, fixed builds, or workaround text. Avoid assuming internet exposure or administrator compromise without environment evidence.
Mitigation direction
- Check Fortinet advisory FG-IR-22-077 for exact vendor remediation and fixed-version guidance.
- Inventory FortiEDR Management Console versions against the affected versions listed in the CVE bundle.
- Restrict Management Console access to trusted administrative users and networks.
- Review administrator account hygiene and remove unnecessary console access.
- Prioritize remediation where console access is broadly available to low-privileged users.
Validation and detection
- Identify all deployed FortiEDR Management Console instances and record their versions.
- Compare versions with FortiEDR 5.1.0, 5.0.0 through 5.0.3 Patch 6, and 4.0.0.
- Confirm whether authenticated non-admin users can reach Management Console endpoints.
- Review FortiEDR and identity logs for unusual authenticated console requests around sensitive workflows.
- Verify applied remediation against Fortinet's advisory rather than relying only on package names.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-29057 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.4 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C2.32.7Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
5.4MediumVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C
Source materials
- CVE List V5 sourceCVE List V5
- https://fortiguard.com/psirt/FG-IR-22-077CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.