CVE-2017-14190: XSS
A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted "Host" header in user HTTP requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14190?
CVE-2017-14190 is considered to be of high severity due to its potential for exploitation through cross-site scripting attacks.
How do I fix CVE-2017-14190?
To fix CVE-2017-14190, upgrade your FortiOS to a version later than 5.6.2, 5.4.7, or 5.2.
What systems are affected by CVE-2017-14190?
CVE-2017-14190 affects Fortinet FortiOS versions 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, and 5.2 and earlier.
What kind of attack can exploit CVE-2017-14190?
CVE-2017-14190 can be exploited through cross-site scripting (XSS) by injecting arbitrary web scripts via a malicious 'Host' header.
Is CVE-2017-14190 publicly known?
Yes, CVE-2017-14190 is publicly disclosed and has been documented in various security advisories.