Skip to content
OpenAdvisories
Unscored CVE-2017-7736 EUVD-2017-16711GHSA-rwp4-gmh2-2rg6

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows atta…

Published Nov 22, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWeb Category: Network devices

Description

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb 5.8.0, 5.7.1 and earlier —

References