CVE-2017-7739

EPSS 1.1%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 nov 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.

Productos afectados

Fortinet, Inc. · FortiOS

Referencias

https://fortiguard.com/advisory/FG-IR-17-168 http://www.securityfocus.com/bid/101679 http://www.securitytracker.com/id/1039741