CVE-2017-14190

EPSS 1.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jan 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted "Host" header in user HTTP requests.

Produtos afetados

Fortinet, Inc. · FortiOS

Referências

https://fortiguard.com/advisory/FG-IR-17-262 http://www.securityfocus.com/bid/102779 http://www.securitytracker.com/id/1040284