CVE-2017-17541: vulnerability in Fortinet FortiManager, FortiAnalyzer
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Affected products
Fortinet · Fortinet FortiManager, FortiAnalyzerRelated CVEs — Fortinet FortiManager, FortiAnalyzer
In the same product, most dangerous first.