CVE-2017-7735

CVE-2017-7735: vulnerability in Fortinet FortiOS

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
exploitation probability
0.8%top 45% of all CVEs
observed exploitation
nono source reports it
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.
Affected products
Fortinet, Inc. · Fortinet FortiOS
Related CVEs — Fortinet FortiOS

In the same product, most dangerous first.

CVE-2017-3133—CVE-2017-3133EPSS 10.7%CVE-2017-3132—CVE-2017-3132EPSS 8.1%CVE-2017-3131—CVE-2017-3131EPSS 7.7%CVE-2018-13376—CVE-2018-13376EPSS 2.1%CVE-2017-3130—CVE-2017-3130EPSS 1.4%CVE-2017-7734—CVE-2017-7734EPSS 0.8%
References
https://fortiguard.com/advisory/FG-IR-17-127http://www.securityfocus.com/bid/99098http://www.securitytracker.com/id/1038705