CVE-2017-7735

EPSS 0.8%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 sep 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

Productos afectados

Fortinet, Inc. · Fortinet FortiOS

Referencias

https://fortiguard.com/advisory/FG-IR-17-127 http://www.securityfocus.com/bid/99098 http://www.securitytracker.com/id/1038705