CVE-2017-3129

6.1 mediumEPSS 0.7%

Medium (6.1) in fortinet fortiweb. EPSS 0.7% chance of exploitation in the next 30 days.

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-05-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiweb

References

http://www.securityfocus.com/bid/98382
https://fortiguard.com/psirt/FG-IR-17-076
http://www.securityfocus.com/bid/98382
https://fortiguard.com/psirt/FG-IR-17-076

Check your stack JSON