Medium severity5.4NVD Advisory· Published Sep 12, 2017· Updated Jun 17, 2026
CVE-2017-7734
CVE-2017-7734
Description
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.
Affected products
6cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*
- Fortinet, Inc./Fortinet FortiOSv5Range: FortiOS versions 5.4.0 through 5.4.4
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/99098nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038705nvdThird Party AdvisoryVDB Entry
- fortiguard.com/advisory/FG-IR-17-127nvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.