CVE-2017-7335

보통 5.4CVE-2017-7335 · Published 26/10/2017 · updated 17/06/2026

요약

CVE-2017-7335은(는) fortiwlc (fortinet)에 영향을 주는 보통 (CVSS 5.4) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.54%, 전체 취약점의 45.3%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
fortiwlc fortinet	`= 6.1-2= 6.1-4= 6.1-5= 7.0-10= 7.0-7= 7.0-8= 7.0-9= 8.0= 8.1= 8.2= 8.3.0= 8.3.1= 8.3.2`	No fix yet

Description

A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests.

References

securityfocus.com/bid/101287 · Third Party Advisory
fortiguard.com/psirt/FG-IR-17-106 · Vendor Advisory

fortiwlc의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortiwlc

fortinet

= 6.1-2= 6.1-4= 6.1-5= 7.0-10= 7.0-7= 7.0-8= 7.0-9= 8.0= 8.1= 8.2= 8.3.0= 8.3.1= 8.3.2

No fix yet

Description

fortiwlc의 다른 취약점

모두 보기 →