What’s Vulnerable › Vulnerabilities

CVE-2017-7732

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-26 · updated 2026-06-17
• Weakness: CWE-79

Description

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.

Affected products

• Fortinet FortiMail: 4.1.0, 4.2.0, 4.3.0, 4.3.8, 5.0, 5.0.1 (+30)

References

• http://www.securityfocus.com/bid/101278
• http://www.securitytracker.com/id/1039584
• https://fortiguard.com/psirt/FG-IR-17-099
• http://www.securityfocus.com/bid/101278
• http://www.securitytracker.com/id/1039584
• https://fortiguard.com/psirt/FG-IR-17-099

Get alerted when CVE-2017-7732 or the next vulnerability affects your stack