CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

Fortinet FortiOS is affected by a stored XSS vulnerability in the policy global-label parameter. Root cause: improper validation of user-supplied input. Affected versions are FortiOS 5.0.x and 5.2.x prior to 5.2.11. Exploitation requires authentication and privileges; an attacker with write privi...