CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Fortinet, FortiOS. It may be remotely exploitable.
CVE
CVE-2017-14186
Severity
MEDIUM
CVSS
5.4
EPSS
3.72%
Fortinet FortiOS
Original NVD Description
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.
Related CVEs
Other vulnerabilities affecting the same vendor(s)