CVEvulnerability
CVE-2017-7735
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.
Affected configurations
• fortinet fortios 5.2.0
• fortinet fortios 5.2.1
• fortinet fortios 5.2.2
• fortinet fortios 5.2.3
• fortinet fortios 5.2.4
• fortinet fortios 5.2.5
• fortinet fortios 5.2.6
• fortinet fortios 5.2.7
• fortinet fortios 5.2.8
• fortinet fortios 5.2.9
• fortinet fortios 5.2.10
• fortinet fortios 5.2.11
• fortinet fortios 5.4.0
• fortinet fortios 5.4.1
• fortinet fortios 5.4.2
• fortinet fortios 5.4.3
• fortinet fortios 5.4.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/99098 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038705 Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-127 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/99098 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038705 Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-127 Mitigation, Vendor Advisory