CVE-2017-7735

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
fortinetCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
VendorProductVersion
fortinetfortios
5.2.0
fortinetfortios
5.2.1
fortinetfortios
5.2.2
fortinetfortios
5.2.3
fortinetfortios
5.2.4
fortinetfortios
5.2.5
fortinetfortios
5.2.6
fortinetfortios
5.2.7
fortinetfortios
5.2.8
fortinetfortios
5.2.9
fortinetfortios
5.2.10
fortinetfortios
5.2.11
fortinetfortios
5.4.0
fortinetfortios
5.4.1
fortinetfortios
5.4.2
fortinetfortios
5.4.3
fortinetfortios
5.4.4
𝑥
= Vulnerable software versions