CVE-2017-7339

2017-05-2622:00:00

fortinet

www.cve.org

0.001 Low

EPSS

Percentile

38.3%

JSON

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the ‘Name’ and ‘Description’ inputs in the ‘Add Revision Backup’ functionality.

CNA Affected

[
  {
    "product": "Fortinet FortiPortal",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiPortal versions 4.0.0 and below"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-17-114

0.001 Low

EPSS

Percentile

38.3%

JSON

Related for CVELIST:CVE-2017-7339