CVE-2017-7739: XSS
First published: Mon Nov 13 2017(Updated: )
A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiOS | =5.2.0 | |
| Fortinet FortiOS | =5.2.1 | |
| Fortinet FortiOS | =5.2.2 | |
| Fortinet FortiOS | =5.2.3 | |
| Fortinet FortiOS | =5.2.4 | |
| Fortinet FortiOS | =5.2.5 | |
| Fortinet FortiOS | =5.2.6 | |
| Fortinet FortiOS | =5.2.7 | |
| Fortinet FortiOS | =5.2.8 | |
| Fortinet FortiOS | =5.2.9 | |
| Fortinet FortiOS | =5.2.10 | |
| Fortinet FortiOS | =5.2.11 | |
| Fortinet FortiOS | =5.4.0 | |
| Fortinet FortiOS | =5.4.1 | |
| Fortinet FortiOS | =5.4.2 | |
| Fortinet FortiOS | =5.4.3 | |
| Fortinet FortiOS | =5.4.4 | |
| Fortinet FortiOS | =5.4.5 | |
| Fortinet FortiOS | =5.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortios
- version/fortinet fortios/5.2.0
- version/fortinet fortios/5.2.1
- version/fortinet fortios/5.2.2
- version/fortinet fortios/5.2.3
- version/fortinet fortios/5.2.4
- version/fortinet fortios/5.2.5
- version/fortinet fortios/5.2.6
- version/fortinet fortios/5.2.7
- version/fortinet fortios/5.2.8
- version/fortinet fortios/5.2.9
- version/fortinet fortios/5.2.10
- version/fortinet fortios/5.2.11
- version/fortinet fortios/5.4.0
- version/fortinet fortios/5.4.1
- version/fortinet fortios/5.4.2
- version/fortinet fortios/5.4.3
- version/fortinet fortios/5.4.4
- version/fortinet fortios/5.4.5
- version/fortinet fortios/5.6.0