CVE-2017-3125

🗓️ 12 Apr 2017 15:00:00Reported by fortinetType

An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker

Reporter	Title	Published	Views	Family All 7
CNVD	Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2017-04565)	7 Apr 201700:00	–	cnvd
CVE	CVE-2017-3125	12 Apr 201715:00	–	cve
EUVD	EUVD-2017-12266	7 Oct 202500:30	–	euvd
Fortinet	Unauthenticated XSS (Cross Site Scripting) in FortiMail	4 Apr 201700:00	–	fortinet
NVD	CVE-2017-3125	12 Apr 201715:59	–	nvd
Prion	Design/Logic Flaw	12 Apr 201715:59	–	prion
Vulnrichment	CVE-2017-3125	12 Apr 201715:00	–	vulnrichment

[
  {
    "product": "FortiMail",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-17-011
securityfocus	www.securityfocus.com/bid/97474

13 Apr 2017 09:57Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00581