CVE-2017-3128

EUVD-2017-12269
A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
fortinetfortios
5.0.0
fortinetfortios
5.0.1
fortinetfortios
5.0.2
fortinetfortios
5.0.3
fortinetfortios
5.0.4
fortinetfortios
5.0.5
fortinetfortios
5.0.6
fortinetfortios
5.0.7
fortinetfortios
5.0.8
fortinetfortios
5.0.9
fortinetfortios
5.0.10
fortinetfortios
5.0.11
fortinetfortios
5.0.12
fortinetfortios
5.0.13
fortinetfortios
5.0.14
fortinetfortios
5.2.0
fortinetfortios
5.2.1
fortinetfortios
5.2.2
fortinetfortios
5.2.3
fortinetfortios
5.2.4
fortinetfortios
5.2.5
fortinetfortios
5.2.6
fortinetfortios
5.2.7
fortinetfortios
5.2.8
fortinetfortios
5.2.9
fortinetfortios
5.2.10
𝑥
= Vulnerable software versions