Lucene search

[email protected]CVE-2017-7335

HistoryOct 26, 2017 - 1:29 p.m.

CVE-2017-7335

2017-10-2613:29:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2017-7335

cross-site scripting

xss vulnerability

fortinet fortiwlc

security

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

21.7%

JSON

A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters “refresh” and “branchtotable” present in HTTP POST requests.

Affected configurations

NVD

Node

fortinetfortiwlcMatch6.1-2

fortinetfortiwlcMatch6.1-4

fortinetfortiwlcMatch6.1-5

fortinetfortiwlcMatch7.0-7

fortinetfortiwlcMatch7.0-8

fortinetfortiwlcMatch7.0-9

fortinetfortiwlcMatch7.0-10

fortinetfortiwlcMatch8.0

fortinetfortiwlcMatch8.1

fortinetfortiwlcMatch8.2

fortinetfortiwlcMatch8.3.0

fortinetfortiwlcMatch8.3.1

fortinetfortiwlcMatch8.3.2

CPENameOperatorVersion
fortinet:fortiwlcfortinet fortiwlceq6.1-2
fortinet:fortiwlcfortinet fortiwlceq6.1-4
fortinet:fortiwlcfortinet fortiwlceq6.1-5
fortinet:fortiwlcfortinet fortiwlceq7.0-7
fortinet:fortiwlcfortinet fortiwlceq7.0-8
fortinet:fortiwlcfortinet fortiwlceq7.0-9
fortinet:fortiwlcfortinet fortiwlceq7.0-10
fortinet:fortiwlcfortinet fortiwlceq8.0
fortinet:fortiwlcfortinet fortiwlceq8.1
fortinet:fortiwlcfortinet fortiwlceq8.2

CPE	Name	Operator	Version
fortinet:fortiwlc	fortinet fortiwlc	eq	6.1-2
fortinet:fortiwlc	fortinet fortiwlc	eq	6.1-4
fortinet:fortiwlc	fortinet fortiwlc	eq	6.1-5
fortinet:fortiwlc	fortinet fortiwlc	eq	7.0-7
fortinet:fortiwlc	fortinet fortiwlc	eq	7.0-8
fortinet:fortiwlc	fortinet fortiwlc	eq	7.0-9
fortinet:fortiwlc	fortinet fortiwlc	eq	7.0-10
fortinet:fortiwlc	fortinet fortiwlc	eq	8.0
fortinet:fortiwlc	fortinet fortiwlc	eq	8.1
fortinet:fortiwlc	fortinet fortiwlc	eq	8.2

Rows per page:

1-10 of 131

References

www.securityfocus.com/bid/101287

fortiguard.com/psirt/FG-IR-17-106

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for CVE-2017-7335

prion1 fortinet1 nvd1 cvelist1