CVE-2018-9186: XSS
A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator?
The vulnerability ID is CVE-2018-9186.
What is the severity of CVE-2018-9186?
The severity of CVE-2018-9186 is medium with a CVSS score of 6.1.
Which versions of Fortinet FortiAuthenticator are affected by CVE-2018-9186?
Versions 4.0.0 to before 5.3.0 of Fortinet FortiAuthenticator are affected by CVE-2018-9186.
How does CVE-2018-9186 work?
CVE-2018-9186 allows an attacker to execute unauthorized script code by injecting malicious scripts in the HTTP referer header and exploiting a CSRF validation failure page.
Are there any available references for CVE-2018-9186?
Yes, you can find more information about CVE-2018-9186 at the following references: [http://www.securityfocus.com/bid/104371](http://www.securityfocus.com/bid/104371) and [https://fortiguard.com/advisory/FG-IR-18-059](https://fortiguard.com/advisory/FG-IR-18-059).