CVE-2017-7736: vulnerability in Fortinet FortiWeb
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.3%
exploitation probability
0.3%top 76% of all CVEs
observed exploitation
nono source reports it
A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.
Affected products
Fortinet, Inc. · Fortinet FortiWebRelated CVEs — Fortinet FortiWeb
In the same product, most dangerous first.