Lucene search
+L

1860 matches found

Vulnrichment
Vulnrichment
added 2017/06/01 2:0 p.m.12 views

CVE-2017-3127

A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation...

7AI score0.00961EPSS
SaveExploits0References3
OSV
OSV
added 2017/05/27 12:29 a.m.4 views

CVE-2017-7343

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

6.1CVSS5.9AI score0.00665EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/27 12:29 a.m.5 views

CVE-2017-7339

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality...

6.1CVSS5.9AI score0.00664EPSS
SaveExploits0References1
NVD
NVD
added 2017/05/27 12:29 a.m.21 views

CVE-2017-7339

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality...

6.1CVSS6.2AI score0.00664EPSS
SaveExploits0References1
NVD
NVD
added 2017/05/27 12:29 a.m.19 views

CVE-2017-7343

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

6.1CVSS6.5AI score0.00665EPSS
SaveExploits0References1
NVD
NVD
added 2017/05/27 12:29 a.m.19 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.1CVSS6.3AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
added 2017/05/27 12:29 a.m.20 views

Cross site scripting

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

4.3CVSS6.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/05/27 12:29 a.m.21 views

Open redirect

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

5.8CVSS6.6AI score0.00665EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/05/27 12:29 a.m.20 views

Cross site scripting

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality...

4.3CVSS6.2AI score0.00664EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/05/27 12:29 a.m.15 views

Open redirect

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter...

5.8CVSS6.6AI score0.00943EPSS
SaveExploits0References4Affected Software2
NVD
NVD
added 2017/05/27 12:29 a.m.15 views

CVE-2017-3126

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter...

6.1CVSS6.5AI score0.00943EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/05/26 10:0 p.m.22 views

CVE-2017-3126

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter...

6.5AI score0.00943EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2017/05/26 10:0 p.m.13 views

CVE-2017-7339

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality...

7AI score0.00664EPSS
SaveExploits0References1
CVE
CVE
added 2017/05/26 10:0 p.m.59 views

CVE-2017-7339

CVE-2017-7339 affects Fortinet FortiPortal 4.0.0 and earlier, where a cross-site scripting flaw exists in the Add Revision Backup function via the Name and Description inputs. The vulnerability enables an attacker to inject and execute script in the context of a logged-in user. The connected docu...

6.1CVSS6.7AI score0.00664EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2017/05/26 10:0 p.m.14 views

CVE-2017-3126

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter...

7.7AI score0.00943EPSS
SaveExploits0References4
CVE
CVE
added 2017/05/26 10:0 p.m.58 views

CVE-2017-7343

CVE-2017-7343 : The connected documents confirm a vulnerability in Fortinet FortiPortal ≤ 4.0.0 described as an open redirect via the url parameter . This could allow an attacker to cause unauthorized actions by redirecting or manipulating the request, with the NVD entry noting that an attacker c...

6.1CVSS7.1AI score0.00665EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/05/26 10:0 p.m.23 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.2AI score0.00713EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2017/05/26 10:0 p.m.11 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

7AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
added 2017/05/23 5:29 p.m.18 views

Cross site scripting

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

3.5CVSS5.2AI score0.00714EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/05/23 5:29 p.m.26 views

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

4.8CVSS5.3AI score0.00714EPSS
SaveExploits0References3
Rows per page
Query Builder