CVE-2017-7739

EPSS 1.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Nov 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.

Affected products

Fortinet, Inc. · FortiOS

References

https://fortiguard.com/advisory/FG-IR-17-168 http://www.securityfocus.com/bid/101679 http://www.securitytracker.com/id/1039741