VYPR
Get started
← All advisories
Medium severity5.4NVD Advisory· Published Sep 12, 2017· Updated May 13, 2026

CVE-2017-7735

CVE-2017-7735

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

Affected products

18
  • Fortinet/Fortios17 versions
    cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*
  • Fortinet, Inc./Fortinet FortiOSv5
    Range: FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.