CVE-2017-7735

Published: Sep 12, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

Affected (17)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.2.0
Fortinet Fortios	Version 5.2.10
Fortinet Fortios	Version 5.2.11
Fortinet Fortios	Version 5.2.1
Fortinet Fortios	Version 5.2.2
Fortinet Fortios	Version 5.2.3
Fortinet Fortios	Version 5.2.4
Fortinet Fortios	Version 5.2.5
Fortinet Fortios	Version 5.2.6
Fortinet Fortios	Version 5.2.7
Fortinet Fortios	Version 5.2.8
Fortinet Fortios	Version 5.2.9
Fortinet Fortios	Version 5.4.0
Fortinet Fortios	Version 5.4.1
Fortinet Fortios	Version 5.4.2
Fortinet Fortios	Version 5.4.3
Fortinet Fortios	Version 5.4.4