Lucene search

CVE-2018-9186

🗓️ 31 May 2018 22:00:29Reported by fortinetType

A XSS vulnerability in Fortinet FortiAuthenticator allows unauthorized script execution via HTTP referer header injection

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Fortinet	Potential XSS in "CSRF validation failure" page due to lack of referer sanitization	29 May 201800:00	–	fortinet
Vulnrichment	CVE-2018-9186	31 May 201822:00	–	vulnrichment
Cvelist	CVE-2018-9186	31 May 201822:00	–	cvelist
NVD	CVE-2018-9186	31 May 201822:29	–	nvd
Prion	Cross site scripting	31 May 201822:29	–	prion

Nvd

Node

fortinet fortiauthenticatorRange4.0.0–5.3.0

[
  {
    "product": "FortiAuthenticator",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "below 5.3.0 versions"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/advisory/FG-IR-18-059
securityfocus	www.securityfocus.com/bid/104371

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 May 2018 22:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS36.1

EPSS0.00265

SSVC

CWE-79