CVE-2017-17541

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-16 · updated 2026-06-17
Weakness: CWE-79

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.

Affected products

Fortinet Fortianalyzer Firmware: through 5.6.4; 6.0.0
Fortinet Fortimanager Firmware: through 5.6.4; 6.0.0

References

http://www.securitytracker.com/id/1041246
http://www.securitytracker.com/id/1041247
https://fortiguard.com/advisory/FG-IR-17-305
http://www.securitytracker.com/id/1041246
http://www.securitytracker.com/id/1041247
https://fortiguard.com/advisory/FG-IR-17-305

Get alerted when CVE-2017-17541 or the next vulnerability affects your stack