CVE-2017-7736

Опубликовано: 22 нояб. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

Ссылки

http://www.securityfocus.com/bid/101916
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-17-131
Issue Tracking
Vendor Advisory
http://www.securityfocus.com/bid/101916
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-17-131
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*

Версия до 5.7.1 (включая)

cpe:2.3:a:fortinet:fortiweb:5.8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00151

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-rwp4-gmh2-2rg6