CVE-2017-17541

Published: Jul 16, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.

Affected (4)

Products: Fortinet: Fortianalyzer Firmware, Fortimanager Firmware

Fortinet

2 products

Fortianalyzer Firmware

Fortimanager Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortianalyzer Firmware	Up to 5.6.4
Fortinet Fortianalyzer Firmware	Version 6.0.0
Fortinet Fortimanager Firmware	Up to 5.6.4
Fortinet Fortimanager Firmware	Version 6.0.0