Vulnetix
Try Vulnetix Request Demo
CVE-2017-7739 PUBLISHED CVSS 6.099999904632568 MEDIUM

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.

EPSS 0.74% · 72.8th percentile

Risk Scores

CVSS v3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.74%
72.8th percentile

Affected Products

VendorProductVersions
fortinetfortios5.6.0, 5.4.3, 5.4.4
Fortinet, Inc.FortiOS5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.2.11, 5.2.10, 5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.6.0

Timeline

References

Open in Interactive Console →