CVE-2017-3128

Description

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.

References

https://fortiguard.com/psirt/FG-IR-17-057

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-12269

http://www.securitytracker.com/id/1038541

http://www.securityfocus.com/bid/98514

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS