What is CVE-2017-7339?

CVE-2017-7339 is a medium-severity vulnerability in Fortinet Fortiportal, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2017-05-27.

How severe is CVE-2017-7339?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Is CVE-2017-7339 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Fortinet Fortiportal

CVE-2017-7339

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.007 (48.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Fortinet Fortiportal
Fortinet, Inc. Fortinet Fortiportal — versions FortiPortal versions 4.0.0 and below

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

vulsio/go-cve-dictionary

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-7339?: CVE-2017-7339 is a medium-severity vulnerability in Fortinet Fortiportal, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2017-05-27.
How severe is CVE-2017-7339?: Medium severity. CVSS v3 base score is 6.1 out of 10.
Is CVE-2017-7339 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.