CVE-2017-7734

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.

Score

CVSS 3.0 5.4 Medium

Status

Modified - psirt@fortinet.com

Published

2017-09-12

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortios (Fortinet)
• Fortinet Fortios (Fortinet Inc.)

References

• http://www.securityfocus.com/bid/99098
• http://www.securitytracker.com/id/1038705
• https://fortiguard.com/advisory/FG-IR-17-127