CVE-2017-3129

2017-05-2622:00:00

fortinet

www.cve.org

EPSS

0.001

Percentile

32.7%

JSON

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.

CNA Affected

[
  {
    "product": "Fortinet FortiWeb",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiWeb versions 5.7.1 and below"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98382

fortiguard.com/psirt/FG-IR-17-076

EPSS

0.001

Percentile

32.7%

JSON

Related for CVELIST:CVE-2017-3129