CVE-2017-3125
CVE-2017-3125
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Apr 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.
Affected products
Fortinet · FortiMailWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →