Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-26262)

Fortinet FortiOS is the United States Fita Fortinet company developed a set of dedicated to FortiGate network security platform on the security operating system. A cross-site scripting vulnerability exists in Fortinet FortiOS. A remote attacker could exploit this vulnerability to execute arbitrar...

FortiOS XSS vulnerabilities via FortiView Application filter, FortiToken activation & SSL VPN Replacement Messages

Three XSS vulnerabilities...

FortiOS 5.6.0 Cross Site Scripting

Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS versions 5.4.0 to 5.6.0 CVE-2017-3132 : FortiOS versions...

FortiOS 5.6.0 - Cross-Site Scripting

FortiOS 5.6.0 - Cross-Site Scripting Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS versions 5.4.0 to...

FortiOS < 5.6.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS...

PT-2017-3712

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.6.0 and earlier Description: The issue is related to a Cross-Site Scripting vulnerability in the Replacement Message HTML for SSL-VPN, which is caused by insufficient protection of the web page structure. This allows an...

PT-2017-3714

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.4.0 through 5.4.4 FortiOS version 5.6.0 Description: The issue is related to a Cross-Site Scripting vulnerability that allows attackers to execute unauthorized code or commands. This is caused by insufficient protection of...

PT-2017-3713

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.6.0 and earlier Description: A Cross-Site Scripting issue allows attackers to execute unauthorized code or commands via the action input during the activation of a FortiToken. The vulnerability is caused by insufficient...

Fortinet FortiOS 5.2.x / 5.3.x / 5.4.x < 5.4.5 Multiple XSS (FG-IR-17-127)

The version of Fortinet FortiOS running on the remote device is 5.2.x, 5.3.x, or 5.4.x prior to 5.4.4. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting XSS vulnerability exists when saving configuration revisions due to improper validation...

Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-11805)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A cross-site...

Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-11806)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A cross-site...

PT-2017-3086

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.4.0 through 5.4.4 Description The issue allows attackers to execute unauthorized code or commands via the Comments field while saving Config Revisions, enabling remote attackers to perform Cross-Site Scripting attac...

PT-2017-3085

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.2.0 through 5.2.11 FortiOS versions 5.4.0 through 5.4.4 Description The issue is related to a lack of protection for the web page structure in FortiOS, allowing for Cross-Site Scripting attacks. This can be exploited by a...

FortiOS XSS vulnerabilities via User Groups & Config Revision Comments

Two XSS vulnerabilities were reported to us affecting FortiOS that can be exploited to load and run a remote malicious Javascript in a logged in browser...

Fortinet FortiOS 5.0.x / 5.2.x < 5.2.11 'global-label' Parameter XSS (FG-IR-17-057)

The version of Fortinet FortiOS running on the remote device is 5.0.x or 5.2.x prior to 5.2.11. It is, therefore, affected by a stored cross-site scripting XSS vulnerability due to improper validation of user-supplied input to the 'global-label' parameter. An authenticated, remote attacker can...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

Cross site scripting

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

Fortinet FortiOS is affected by a stored XSS vulnerability in the policy global-label parameter. Root cause: improper validation of user-supplied input. Affected versions are FortiOS 5.0.x and 5.2.x prior to 5.2.11. Exploitation requires authentication and privileges; an attacker with write privi...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...