What’s Vulnerable › Vulnerabilities

CVE-2017-7736

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17
• Weakness: CWE-79

Description

A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.

Affected products

• Fortinet FortiWeb: through 5.7.1; 5.8.0

References

• http://www.securityfocus.com/bid/101916
• https://fortiguard.com/advisory/FG-IR-17-131
• http://www.securityfocus.com/bid/101916
• https://fortiguard.com/advisory/FG-IR-17-131

Get alerted when CVE-2017-7736 or the next vulnerability affects your stack