CVE-2017-7732

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@fortinet.com

Published

2017-10-26

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortimail (Fortinet)

References

• http://www.securityfocus.com/bid/101278
• http://www.securitytracker.com/id/1039584
• https://fortiguard.com/psirt/FG-IR-17-099