CVE-2017-7739

6.1 mediumEPSS 1.1%

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

http://www.securityfocus.com/bid/101679
http://www.securitytracker.com/id/1039741
https://fortiguard.com/advisory/FG-IR-17-168
http://www.securityfocus.com/bid/101679
http://www.securitytracker.com/id/1039741

Check your stack JSON