Skip to content
OpenAdvisories
Unscored CVE-2017-7339 EUVD-2017-16366GHSA-gc6g-px67-ppv4

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or co…

Published May 26, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiPortal Category: Network devices

Description

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal FortiPortal versions 4.0.0 and below —

References