CVE-2017-3128

Published: May 23, 2017Modified: May 13, 2026

4.8

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.7 / Impact: 2.7

Source: NVD

Description

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.

Affected (26)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.0.0
Fortinet Fortios	Version 5.0.10
Fortinet Fortios	Version 5.0.11
Fortinet Fortios	Version 5.0.12
Fortinet Fortios	Version 5.0.13
Fortinet Fortios	Version 5.0.14
Fortinet Fortios	Version 5.0.1
Fortinet Fortios	Version 5.0.2
Fortinet Fortios	Version 5.0.3
Fortinet Fortios	Version 5.0.4
Fortinet Fortios	Version 5.0.5
Fortinet Fortios	Version 5.0.6
Fortinet Fortios	Version 5.0.7
Fortinet Fortios	Version 5.0.8
Fortinet Fortios	Version 5.0.9
Fortinet Fortios	Version 5.2.0
Fortinet Fortios	Version 5.2.10
Fortinet Fortios	Version 5.2.1
Fortinet Fortios	Version 5.2.2
Fortinet Fortios	Version 5.2.3
Fortinet Fortios	Version 5.2.4
Fortinet Fortios	Version 5.2.5
Fortinet Fortios	Version 5.2.6
Fortinet Fortios	Version 5.2.7
Fortinet Fortios	Version 5.2.8
Fortinet Fortios	Version 5.2.9