CVE-2017-7739

EPSS 1.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 nov 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.

Produtos afetados

Fortinet, Inc. · FortiOS

Referências

https://fortiguard.com/advisory/FG-IR-17-168 http://www.securityfocus.com/bid/101679 http://www.securitytracker.com/id/1039741