Skip to content
OpenAdvisories
Unscored CVE-2017-3128 EUVD-2017-12269GHSA-24wc-f6vq-w8mh

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the pol…

Published May 23, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS 5.0.0-5.0.14, 5.2.0-5.2.10 —

References