VDB
CVE-2017-14186
CVE-2017-14186
PUBLISHED
KEV
CVSS 9.300000190734863 CRITICAL
Une vulnérabilité a été découverte dans Fortinet FortiOS. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).
EPSS 3.72% · 88.7th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
3.72%
88.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS |
Timeline
- Nov 24, 2017 CVE Published
- Dec 4, 2017 PoC Published
- Aug 27, 2019 PoC Published
- Aug 27, 2019 PoC Published
- Feb 27, 2020 PoC Published
- Jul 16, 2020 PoC Published
- Oct 9, 2020 PoC Published
- Oct 9, 2020 PoC Published
- Oct 13, 2020 PoC Published
- Oct 13, 2020 PoC Published
- Oct 22, 2020 PoC Published
- Oct 22, 2020 PoC Published
References
- https://cert.ssi.gouv.fr/avis/CERTFR-2017-AVI-429/ advisory
- http://fortiguard.com/psirt/FG-IR-17-242 advisory
- https://cert.ssi.gouv.fr/avis/CERTFR-2019-AVI-239/ advisory
- https://fortiguard.com/psirt/FG-IR-18-383 advisory
- https://fortiguard.com/psirt/FG-IR-19-034 advisory
- https://fortiguard.com/psirt/FG-IR-17-242 advisory
- https://fortiguard.com/psirt/FG-IR-18-384 advisory
- https://fortiguard.com/psirt/FG-IR-18-389 advisory