CVE-2017-7736

—

CVSS 3.0

5.4 medium

EPSS

<1%p26

Published

Nov 22, 2017 (Nov 22, 2017)

Modified

Jun 17, 2026

Description

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

Vendors: fortinet
Products: fortiweb
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.