CVE-2018-1355

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-27 · updated 2026-06-17
Weakness: CWE-601

Description

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

Affected products

Fortinet FortiAnalyzer: through 5.6.5; 6.0.0
Fortinet FortiManager: through 5.6.5; 6.0.0

References

http://www.securityfocus.com/bid/104546
http://www.securitytracker.com/id/1041184
http://www.securitytracker.com/id/1041185
https://fortiguard.com/advisory/FG-IR-18-022
http://www.securityfocus.com/bid/104546
http://www.securitytracker.com/id/1041184
http://www.securitytracker.com/id/1041185
https://fortiguard.com/advisory/FG-IR-18-022

Get alerted when CVE-2018-1355 or the next vulnerability affects your stack