Medium severity6.1NVD Advisory· Published Jun 27, 2018· Updated Jun 17, 2026
CVE-2018-1355
CVE-2018-1355
Description
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.
Affected products
7cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: <=5.6.5
- cpe:2.3:a:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=5.6.5, 6.0.0
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: <=5.6.5
- cpe:2.3:a:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=5.6.5, 6.0.0
- Fortinet, Inc./Fortinet FortiManager, FortiAnalyzerv5Range: FortiManager 6.0.0, 5.6.5 and below versions
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/104546nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041184nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041185nvdThird Party AdvisoryVDB Entry
- fortiguard.com/advisory/FG-IR-18-022nvdVendor Advisory
News mentions
0No linked articles in our index yet.