CVE-2017-3132

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...

CVE-2017-3132

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...

CVE-2017-3132: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...

Multiple XSS vulnerabilities affecting FortiOS - Applications, Assign Token, Replacement Messages

Three XSS vulnerabilities one via the the filter input in "Applications" under FortiView CVE-2017-3131 the second via the action input during the activation of a FortiToken CVE-2017-3132 the third via the Replacement Message HTML for SSL-VPN CVE-2017-3133 can be exploited to load and run a remote...

PT-2017-3713

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.6.0 and earlier Description: A Cross-Site Scripting issue allows attackers to execute unauthorized code or commands via the action input during the activation of a FortiToken. The vulnerability is caused by insufficient...

Fortinet FortiAuthenticator Appliance Command Execution Vulnerability

Fortinet FortiAuthenticator is a family of secure authentication software from Fortinet that can be combined with FortiToken two-factor authentication token to provide secure two-factor authentication to third-party devices authenticated via RADIUS or LDAP. A command execution vulnerability exist...