Skip to content
OpenAdvisories
Unscored CVE-2017-7340 EUVD-2017-16367GHSA-vr2g-px6h-r3mp

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or co…

Published Mar 25, 2019 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiPortal Category: Network devices

Description

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal 4.0.0 and below —

References