CVE-2017-3131

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.83%

Published

Sep 11, 2017

Modified

May 12, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBFortinet FortiOS < 5.6.0 - Cross-Site Scripting NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.

Weaknesses (CWE)

CWE-79

Affected Products (6)

fortinet · fortiosvulnerable

References (8)

http://www.securityfocus.com/bid/100009

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039020

Third Party AdvisoryVDB Entry

https://fortiguard.com/advisory/FG-IR-17-104

MitigationVendor Advisory

https://www.exploit-db.com/exploits/42388/

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/100009

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039020

Third Party AdvisoryVDB Entry

https://fortiguard.com/advisory/FG-IR-17-104

MitigationVendor Advisory

https://www.exploit-db.com/exploits/42388/

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs