CVE-2017-7736

2017-11-2217:00:00

fortinet

www.cve.org

EPSS

0.001

Percentile

21.6%

JSON

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

CNA Affected

[
  {
    "product": "Fortinet FortiWeb",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiWeb 5.8.0, 5.7.1 and earlier"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101916

fortiguard.com/advisory/FG-IR-17-131

EPSS

0.001

Percentile

21.6%

JSON

Related for CVELIST:CVE-2017-7736