CVE-2017-3132

CVE-2017-3132 is a Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier, exploitable via the action input during FortiToken activation. The NVD record lists CVSS 3.0 base score 6.1 (network, low attack complexity, user interaction required) and notes partial integrity...

CVE-2017-7735

CVE-2017-7735 is a publicly documented Cross‑Site Scripting (XSS) vulnerability affecting Fortinet FortiOS. Affected versions are FortiOS 5.2.0–5.2.11 and 5.4.0–5.4.4. The root cause is improper validation of user-supplied input to the Groups field when creating or editing User Groups, allowing a...

CVE-2017-3132

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...

CVE-2017-7734

CVE-2017-7734 is a Fortinet FortiOS XSS vulnerability affecting FortiOS 5.4.0–5.4.4, enabling an authenticated attacker to execute script code via the Comments field during Config Revisions save due to improper input validation. Connected sources corroborate the same description across NVD/NVD mi...

CVE-2017-3132: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...

CVE-2017-7735: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups...

CVE-2017-3133: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN...

CVE-2017-7734: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions...

CVE-2017-3131: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-20964)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...

Information disclosure

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

CVE-2017-3130 concerns Fortinet FortiOS information disclosure: FortiOS 5.6.0, 5.4.4 and earlier versions leak the FortiOS build/version by inspecting IKE VendorID packets. The vulnerability affects FortiOS IKE processing and can expose system version information without user interaction. Documen...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

Fortinet FortiOS 5.2.x < 5.2.12 / 5.4.x < 5.4.6 / 5.6.x < 5.6.1 Multiple Vulnerabilities (FG-IR-17-104)

The version of Fortinet FortiOS running on the remote device is 5.2.x prior to 5.2.12, 5.4.x prior to 5.4.6, or 5.6.x prior to 5.6.1. It is, therefore, affected by multiple vulnerabilities including multiple cross-site scripting XSS vulnerabilities and a flaw in the support of Server Message Bloc...

Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-26263)

Fortinet FortiOS is the United States Fita Fortinet company developed a set of dedicated to FortiGate network security platform on the security operating system. A cross-site scripting vulnerability exists in Fortinet FortiOS. A remote attacker could exploit this vulnerability to execute arbitrar...

Fortinet FortiOS Cross-Site Scripting Vulnerability (CNVD-2017-26261)

Fortinet FortiOS is the United States Fita Fortinet company developed a set of dedicated to FortiGate network security platform on the security operating system. A cross-site scripting vulnerability exists in Fortinet FortiOS. A remote attacker could exploit this vulnerability to execute arbitrar...