CVE-2017-3128: XSS
Published May 23, 2017
·Updated
A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.
Affected Software
26 affected components
Fortinet FortiOS=5.0.0
Fortinet FortiOS=5.0.1
Fortinet FortiOS=5.0.2
Fortinet FortiOS=5.0.3
Fortinet FortiOS=5.0.4
Fortinet FortiOS=5.0.5
Fortinet FortiOS=5.0.6
Fortinet FortiOS=5.0.7
Fortinet FortiOS=5.0.8
Fortinet FortiOS=5.0.9
Fortinet FortiOS=5.0.10
Fortinet FortiOS=5.0.11
Fortinet FortiOS=5.0.12
Fortinet FortiOS=5.0.13
Fortinet FortiOS=5.0.14
Fortinet FortiOS=5.2.0
Fortinet FortiOS=5.2.1
Fortinet FortiOS=5.2.2
Fortinet FortiOS=5.2.3
Fortinet FortiOS=5.2.4
Fortinet FortiOS=5.2.5
Fortinet FortiOS=5.2.6
Fortinet FortiOS=5.2.7
Fortinet FortiOS=5.2.8
Fortinet FortiOS=5.2.9
Fortinet FortiOS=5.2.10
Event History
May 23, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3128?
CVE-2017-3128 is classified as a high-severity stored XSS vulnerability in Fortinet FortiOS.
2
How do I fix CVE-2017-3128?
To fix CVE-2017-3128, upgrade FortiOS to the latest version that addresses this vulnerability.
3
What versions of FortiOS are affected by CVE-2017-3128?
CVE-2017-3128 affects various versions of FortiOS ranging from 5.0.0 to 5.2.10.
4
What type of vulnerability is CVE-2017-3128?
CVE-2017-3128 is a stored Cross-Site Scripting (XSS) vulnerability.
5
What can attackers do with CVE-2017-3128?
Attackers can execute unauthorized code or commands through the vulnerability in FortiOS.