CVE-2017-7339

—

CVSS 3.0

6.1 medium

EPSS

<1%p50

Published

May 27, 2017 (May 27, 2017)

Modified

Jun 17, 2026

Description

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality.

Vendors: fortinet
Products: fortiportal
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.