CVE-2017-7736 — Fortinet, Inc. / Fortinet FortiWeb

CVE-2017-7736

Fortinet, Inc. / Fortinet FortiWeb PUBLISHED

Description (CNA)

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

Affected (CNA)

Vendor / product	Versions
Fortinet, Inc. / Fortinet FortiWeb	affected FortiWeb 5.8.0, 5.7.1 and earlier

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-17-131
http://www.securityfocus.com/bid/101916

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-17-131
http://www.securityfocus.com/bid/101916

CISA-ADP

No English description supplied.

No references supplied.